Impersonated Login when using enforced Organisation Scopes
āUnsolvedšŖµLogināQuestionšOIDC
I've a bit of a conundrum that I'm trying to work through at the moment.
My setup is something like this:
- One Primary Organisation that defines common Projects, Applications
- Several Organisations used for Tenancy, which are granted Projects from the Primary Organisation
- Sereral Web Applications that specify the
In short, I would like to be able to impersonate a given Human User in a given Organisation, and complete a front-end login to one of my Web Applications.
How might something like this be implemented? (ideally without having to change the downstream Web Applications)
My setup is something like this:
- One Primary Organisation that defines common Projects, Applications
- Several Organisations used for Tenancy, which are granted Projects from the Primary Organisation
- Sereral Web Applications that specify the
urn:zitadel:iam:org:id:{id}urn:zitadel:iam:org:id:{id} scope to force Organisation specific loginIn short, I would like to be able to impersonate a given Human User in a given Organisation, and complete a front-end login to one of my Web Applications.
How might something like this be implemented? (ideally without having to change the downstream Web Applications)
