# How to let support agents act as a user without losing the audit trail

DevFeed: [How to let support agents act as a user without losing the audit trail](<https://devfeed.tech/articles/how-to-let-support-agents-act-as-a-user-without-losing-the-audit-trail-16067.md>)

Original publisher: [Read original article](<https://workos.com/blog/support-impersonation-delegated-sessions>)

Author: WorkOS

Published: 2026-08-25T00:00:00Z

Content type: tutorial

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [Authorization](<https://devfeed.tech/topics/authorization.md>), [audit trail](<https://devfeed.tech/topics/audit-trail.md>), [Security](<https://devfeed.tech/topics/security.md>), [Auth0](<https://devfeed.tech/topics/auth0.md>), [browser](<https://devfeed.tech/topics/browser.md>), [MFA](<https://devfeed.tech/topics/mfa.md>)

Tags: [audit-trail](<https://devfeed.tech/tags/audit-trail.md>), [auth0](<https://devfeed.tech/tags/auth0.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [b2b](<https://devfeed.tech/tags/b2b.md>), [browser](<https://devfeed.tech/tags/browser.md>), [mfa](<https://devfeed.tech/tags/mfa.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This tutorial explains how to implement delegated support sessions so support agents can view an application as a customer while preserving authorization scope, short session lifetimes, revocation, dual-identity records, and separate audit events. It uses AuthKit and Audit Logs and compares the approach with Auth0's Session Delegation.

## Source excerpt

Support agents need to see what a user sees. Here is how to run impersonation on AuthKit and Audit Logs with scoping, short sessions, clean revocation, and dual-identity records.