Scenario: User is running on a machine that is logged in as MACHINE. User authenticates (in custom software) to Directory Services as Fred. User then wants to connect to K2 and retrieve a worklist via custom software/K2ROM.
So in code, I've got an IPrincipal (which contains an IUser) for Fred's security context. But K2ROM's Connection.Open can either connect as the current user (MACHINE) or via a connection string that includes a password (which I don't have).
How do I connect to K2 as Fred? (Capturing and storing the password is not an acceptable solution.)
Does this require impersonation?
TIA,
Bill