There is another "Act as" for grouper, which is audited. This enhancement is for Grouper messaging to web services and is not audited (more of a backdoor).
Send the act as
To get this to work, an HTTP header is sent with the request. You need to send the source ID. And you need to send the id or identifier. Note, this is a layer on top of the normal actAs and does not conflict, both can be used. Note these header values should be BASE64 encoded with UTF-8.
X-Grouper-actAsSourceId: base64(sourceId) X-Grouper-actAsSubjectId: base64(subjectId) -or- X-Grouper-actAsSubjectIdentifier: base64(subjectIdentifier)
e.g. for jdbc and test.subject.0
X-Grouper-actAsSourceId: amRiYw== X-Grouper-actAsSubjectId: dGVzdC5zdWJqZWN0LjA=
Grouper client options
--grouperActAsSubjectId=subjId --grouperActAsSubjectIdentifier=subjIdent --grouperActAsSubjectSource=source