I have a ASP.NET Web API project that is making a REST call to my service layer in another project. The service project\'s data access is via Entity Framework 4
The problem is double hop impersonation. You can read about it by this link.
But i'm not sure that such impersonation is possible via REST. I recommend you use database via special account, not integrated security.