Disable Concurrent User Login

[DarwinPH]

Hi! Good day to all! I wanted to ask the community if there is a way to disable concurrent logins of users. I know that its possible to have this with the ADMIN account. But is it also possible for regular users? If it is possible, how would a user logout from a device or computer and log in into a different one? Thank you in advance! Blessings! UPDATE: Found the solution, please close topic. Thnx!

[ede_pfau]

hi, would you care to share?

[DarwinPH]

More than happy to! There are two ways that you can do this, either specifying the setting on the user group or on the user itself. Here are the settings:

set auth-concurrent-override enable
 set auth-concurrent-value 1

Here is the link with regards to the command:! FortiOS CLI Referencel Good day all!

[AndreaSoliva]

Hi be careful because in the CLI is mentioned : set auth-concurrent-value 1 " Set the number of concurrent logins permitted from the !!!!!SAME IP!!!!! address. Range 1 to 100. 0 means no limit. This field is available if auth-concurrentoverride" is enabled. Hope this helps have fun Andrea

[ede_pfau]

Thanks for sharing. Just a thought: Imagine coming from a NATted subnet. Restricting user logins from the same source IP might be more painful in this case than expected.

[aagrafi]

DarwinPH, allow me to disagree. The "set auth-concurrent-value xx" does NOT restrict the concurrent user logon. It restricts the concurrent logon from the same IP. I understand that you require to restrict the concurrent user logon e.g. the concurrent logon with the same username. This should be achieved by the "set admin-concurrent disable" I think.