Application links allow you to configure 'impersonating' and 'non-impersonating' authentication types:
- Impersonating authentication types make requests on behalf of the user who is currently logged in. People will see only the information that they have permission to see. This includes OAuth and Trusted Applications authentication, and should only be used when two servers share the same user base.
- Non-impersonating authentication types always use a pre-configured user, and not the logged-in user, when making a request. The server handling the request determines the level of access to use, and this is used for requests from all users. This includes basic HTTP authentication.