I want to impersonate a Windows Identity, but I only have a Claims Principal to go on. Using this I can construct a Windows Identity using the WindowsIdentity Upn string constructor, but ImpersonationLevel gets set to Identity for said user.

Is there some way to have this user call a webapi that uses windows authentication and have said webapi impersonate the authenticated user to a second windows service?

I also tried casting the ClaimsPrincipal to a to a Windows principal but was unsuccessful.