INSSUserAuthentication::Impersonate

The INSSUserAuthentication::Impersonate method is used to allow the server to impersonate the authentication context of the client.

Syntax

HRESULT Impersonate ( );

Parameters

This method has no parameters

Return Values

This method should return S_OK upon successful completion, or an HRESULT error value.

Remarks

This method should only be called after authentication is complete, and only if the result is NS_AUTH_SUCCESS. The results of authentication can be determined by calling the INSSUserAuthentication::GetAuthenticationResult method.

While the server thread is impersonating the client, it is subject to the same access controls as the client.

Authenticators typically implement this method by calling the following functions:

For HTTP-BASIC authentication, call the Microsoft® Win32® function ImpersonateLoggedOnUser.
For NTLM authentication, call the SSPI function ImpersonateSecurityContext.