python - AppAssertionCredentials on AppEngine: how to impersonate user account? -

i'm using appassertioncredentials on python gae app, authenticate service account. generic service account, don't see how authorize impersonate user accounts in google apps domain.

this possible jwt credentials way (see video: http://www.youtube.com/watch?v=ik14bfd6qhs) jwt doesn't work on appengine.

any suggestions?

signedjwtassertioncredentials can used on app engine, sure turn on pycrypto 2.6, , convert pkcs12 key file pem file:

$ openssl pkcs12 -in xxxxx.p12 -nodes -nocerts > privatekey.pem 

see docs signedjwtassertioncredentials.