We are looking at implementing a impersonation flow to our Angular application. Currently we are using a custom sign-in sign-up policy using local accounts.
The requirements are to be able to login via Azure AD (single tenant) then impersonate a local account. We've setup login via AzureAD and that works. We have also setup the impersonation flow (in a separate policy) which has the user login via AzureAD then does the impersonation flow. If I set the authority to https://{Url}/{TenantID}/B2C_1A_IMPERSONATION then I can impersonate users.
Knowing both flows work on their own we want to be able to have the site allow both without a config change.
So far we have tried setting the knownAuthorities to have both B2C_1A_IMPERSONATION and B2C_1A_SIGNUP_SIGNIN. This causes no login actions to be tried as it doesn't know where to get the well-known config from (this is an assumption).
Any help on getting this working or a simple this isn't possible would be great.
Also raised here: https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/5231