Not Planned Concurrent/Simultaneous Sessions

Discussion in 'Feature Requests' started by NNN, Jul 13, 2020.

  1. NNN

    NNN New Member

    Joined:
    Nov 4, 2016
    Messages:
    3
    Likes Received:
    0
    Hi,

    A recent pen test has brought up the issue that multiple concurrent/simultaneous sessions can exist for a user. It is suggested that this should not be allowed. Is this something that can be implemented as an option? i.e. only one active session per user. Either the user is prompted to kick out the other session or is just blocked from logging in until the other session ends. If the latter it could go hand in hand with my other feature request of session inactivity timeouts here.

    Thanks
     
  2. David

    David Administrator
    Staff Member

    Joined:
    Dec 1, 2015
    Messages:
    781
    Likes Received:
    31
    The concurrent logins are allowed we don't consider to change that behavior nowadays.
     

Share This Page