Bug: Impersonation fails due to missing roles if an user is not logged in

[Nickosaurus]

Hi there,

we use this extension to authenticate all users via the roles from claims setting. Hence, a new user is created when he logs in the first time.

If an admin wants to impersonate an account, which was created via this extension in the user manager, the impersonation falis as the account will have no roles assigned to it, if the user is not currently logged in. This is because this plugin assigns the roles on the fly and does not persist the last roles as seen in the claims.

Yet, persisting the roles is also no viable solution as this will ultimately conflict with the "addRolesFromExistingAccount: true" setting as the system no longer knows where the roles initially came from.

Maybe one of you guys has an inspiring idea how to implement this cleanly. In any case - thanks for this awesome extension.

As a workaround the admin can assign roles prior to the impersination and strip them after his work is finished.