EPISHIP API Impersonation overview

EPISHIP Impersonation API icon 32px svg

Overview

Figure 1. EPISHIP API relationship diagram. Impersonation session initiation and termination flow.

EPISHIP App

EPISHIP’s administrative interface leverages impersonation to allow support staff to “see what the user sees.” This capability is critical for diagnosing permission issues, validating user-specific configurations, and providing hands-on assistance.

EPISHIP API

The REST API that manages the lifecycle of an impersonation session. It handles the secure switching of user contexts and the restoration of the original administrator session upon completion.

Authentication

Strictly controlled via Bearer tokens. Only users with specific administrative privileges can initiate impersonation requests. The system logs all actions taken during an impersonation session for security auditing.

Session Management

A mechanism that temporarily overrides the current user’s identity with that of the target `userId`. This session remains active until an explicit “leave” command is issued, which redirects the administrator back to their original context.

What can users do with the EPISHIP Impersonation API?

Users can use the EPISHIP Impersonation API to perform common workflows, such as:

Impersonation properties and parameters available through the EPISHIP Impersonation API:

Additional info

Related

Related Categories