Hi ,
Please refer : Tech Tip - CA Single Sign-On:Policy Server: How to configure Impersonation?
Regards,
Leo Joseph.