Skip to main content
ranjeet
Explorer
December 12, 2024
Question

How to Ensure Only One Active Session Per User in SOAR

  • December 12, 2024
  • 1 reply
  • 1301 views

Hi @Anonymous,

I’m working on a user authentication system and I need to ensure that each user can only have one active session at any time. Specifically, the requirement is:

  • If a user logs in from a new device or browser, their previous session (if any) should be invalidated or they should be logged out automatically.

I'm looking for suggestions on how to implement this functionality using SOAR. Specifically, I would like to know how to track user sessions across devices and enforce session invalidation on login from a new device.

Any guidance, best practices, or examples would be greatly appreciated!

Thanks!

    1 reply

    AlokAgar
    Staff
    Staff
    December 19, 2024

    Currently, FortiSOAR does allow multiple sessions for a single user.

    ranjeet
    ranjeetAuthor
    Explorer
    December 19, 2024

    Hi @AlokAgar ,
    Is there any functionality that allows a user to have only one active session?

    AlokAgar
    Staff
    Staff
    December 19, 2024

    We don't restrict that currently.

    However, if this is important to you, we encourage you to reach out to your account manager to request the creation of a feature request for same.