As I understand it, high trust apps have the ability to impersonate a user (link):

The app is considered high-trust because it is trusted to use any user identity that the App needs, because the App is responsible for creating the user portion of the access token.

My question is, how do I actually do this - create the access token based on an arbitrary user?

The reason I want to do this is that I want to create/modify a list in the My Site of a small number different users, when another user is executing the app.


The TokenHelper methods for S2S have a parameter of type System.Security.Principal.WindowsIdentity. Pass in the identity you wish the request to execute under. If you pass null, then it is an app-only request.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.