# Login as Customer Pro — Documentation

> Overview The Login as Customer Pro module lets your teams log in to any customer's account directly from the PrestaShop 8 and 9 back office. Every connection is secured by…

- Page: <https://www.datafirefly.com/en/documentation/login-as-customer-pro-prestashop/>
- Language: en
- Last updated: 2026-06-25
- Other languages: [fr](https://www.datafirefly.com/documentation/login-as-customer-pro-prestashop/index.md), [es](https://www.datafirefly.com/es/documentation/login-as-customer-pro-prestashop/index.md), [de](https://www.datafirefly.com/de/documentation/login-as-customer-pro-prestashop/index.md), [it](https://www.datafirefly.com/it/documentation/login-as-customer-pro-prestashop/index.md), [pl](https://www.datafirefly.com/pl/documentation/login-as-customer-pro-prestashop/index.md), [pt](https://www.datafirefly.com/pt/documentation/login-as-customer-pro-prestashop/index.md), [nl](https://www.datafirefly.com/nl/documentation/login-as-customer-pro-prestashop/index.md)
- Index: <https://www.datafirefly.com/en/documentation/llms.txt>

## Overview

The **Login as Customer Pro** module lets your teams log in to any customer's account directly from the PrestaShop 8 and 9 back office. Every connection is secured by a signed, expiring link, an exit banner is shown on the front office, and every session is logged for GDPR.

Three entry points are available: the customer page, the native customers list and a dedicated page with search.

## Installation

1. Upload the `dfconnectas` folder to your shop's `/modules/` directory, or install the ZIP from _Modules > Module Manager_.
2. Click **Install**.
3. Once installed, two entries appear under the _Customers_ menu: "Connect As Customer" (login page) and "Impersonation log".

## Settings

Open the configuration via _Modules > Login as Customer Pro > Configure_.

### Front-office banner

Enable or disable the banner shown while you browse as a customer, and choose its position (top or bottom). It always shows the account in use and offers an instant exit button.

### Link lifetime

- **Instant link**: validity of the one-click login link, in seconds (default 120). Shorter is safer.
- **Magic link**: validity of passwordless links sent to the customer (86400 = 24h by default).

### Behaviour

- **Redirect after login**: customer account or homepage.
- **Block checkout while impersonating**: prevents placing an order during an impersonation session (avoids accidental orders).
- **Button in native customers list**: adds a "Connect" action to each row of the standard customers list.

### Restrictions and log

- **Allowed profiles**: limit access to specific employee profiles. Empty = any employee with access to customers. SuperAdmin is always allowed.
- **Excluded customer groups**: those customers can never be impersonated.
- **Log retention**: how long audit entries are kept, in days (0 = forever).

## Logging in as a customer

### From the customer page

Open a customer's page in the back office. The "Connect As Customer" panel shows a **Connect as this customer** button that opens the front office logged in, in a new tab.

### From the customers list

If the option is enabled, a **Connect** action is added to each row of the native customers list.

### From the dedicated page

The _Customers > Connect As Customer_ menu provides a customer list with search and a one-click login action.

## Passwordless magic link

From the customer page, click **Generate magic link**. The module produces a passwordless login link you can copy and send to the customer: they reach their account without resetting their password. Unlike the instant login, the magic link logs the customer in as themselves (no impersonation banner).

## Banner and session exit

During an impersonation session, a banner is shown across the front office with the customer's name and an **Exit impersonation** button. It logs the customer out, closes the log entry and returns you to the shop. Your back-office admin session is never affected.

## Audit log

The _Customers > Impersonation log_ menu records every session: employee, customer, IP address, start and end time. Retention is configurable to meet your GDPR obligations.

## Guest accounts

Guest accounts (from guest checkout) are not "logged in" in PrestaShop's sense: the "My account" page is unavailable to them. The module then opens a guest session and redirects to the homepage, with the exit banner. You can still review their cart.

## Security

- Every link is HMAC-SHA256 signed with a shop-specific key.
- Instant links are single-use and short-lived.
- Before any login, the module checks the employee profile, the customer account status and excluded groups.

## Troubleshooting

### I'm redirected to the login page

If you land on the login page, the target account is probably a **guest account**: PrestaShop does not treat it as "logged in" and blocks account access. Test with a registered customer to confirm, and use a guest customer to verify the guest session.

### The link says "invalid or expired"

The instant link is single-use and short-lived: regenerate it from the back office. If needed, increase the lifetime in the settings.