JBoss Community Archive (Read Only)

PicketLink

Restricting Multiple Logins At IDP

Objective

Restrict multiple logins for the same user. There are business cases when users are not allowed to login simultaneously, because there are auditing process that are going to log operations for the same user at different workstations, that can cause confusion in the auditing process.

Component

Federation - SAML SSO.

Requirements

The system must have an option to not allow simultaneous login.

The system should not allow the second login attempt. Thrown an exception with detailed message.

The system, should allow the second login, but must invalidate the first login. This should be an option.

Design

TBD

Workaround

Implement a login module that checks the simultaneous login and proceed as described in the requirements section.

JIRA Issue

TBD

Planned For Version

TBD

JBoss.org Content Archive (Read Only), exported from JBoss Community Documentation Editor at 2020-03-11 12:19:45 UTC, last content change 2013-11-06 16:46:33 UTC.