How does kubernetes achieve user impersonation when using SSO(SAML) based authentication?

Question

I am trying to design a user impersonation workflow for my application wherein the impersonator can create a resource(the resource is a scheduled job which runs later, when