Impersonate and RemoteAccess

[Cantor, Scott]

I can't see any way you could combine RemoteUser supplying Attributes with the impersonation feature. It doesn't redo authentication and the data there's just going to be wrong.

There are probably lots of combinations of scenarios and features that break impersonation, it's not a panacea. It's designed for cases where the data comes from a directory so that looking up a different user's data is possible.

-- Scott