Understand Riva Impersonation Models

To synchronize multiple users from a single Riva connection and to avoid having to create individual user connections with individual passwords and sync policies in Riva, a configuration option called “Impersonation” is available.

Impersonation allows Riva to connect to the CRM by using a "connection account" or “service” account and synchronize on behalf of each user without each user's password. The service account requires appropriate permissions to access and/or modify the CRM data.

Two Riva impersonation models are available, depending on the CRM vendor:

• Standard Impersonation
• Enterprise Impersonation

Standard Impersonation

Standard Impersonation connects to the CRM with the credentials of a CRM admin user. Riva uses the permissions of the CRM user configured in the Riva CRM connection to create and modify items and data in the CRM.

When Riva creates new items or modifies existing items in the CRM, Riva assigns ownership to the target user. But because the actions are being performed by the "Riva connection user", the audit fields in CRM record the "Riva connection user" as the user that created and modified the item.

Enterprise Impersonation

Enterprise Impersonation is used by CRMs that support "sudo" impersonation or Delegate Authenticate - Single Sign-on. When this method connects to the CRM, it uses the credentials of a CRM admin user and then uses special permission to "log in as" the target user without needing the user's password.

When Riva creates new items in the CRM, it assigns ownership to the target user. Since Riva is now acting on behalf of the target user, all audit fields in the CRM record the target user as the user who created and modified the item. Riva uses the permissions of the CRM target user to create and modify items and data in the CRM.

Impersonation Model Support Matrix

Each CRM has different security and access control mechanisms. Therefore, certain CRMs may or may not support the different impersonation models.

The following table identifies the CRM and the supported impersonation model.

¹ This option is no longer recommended. For information, contact the Riva Success Team.