Configuring SP to limit each user to one concurrent session

[Klumpenaar, Michael (US - Newton)]

I have been unable to find any way to configure the SP to limit a user to a single concurrent session, which is a requirement in our system. We are also exploring ways of enforcing this constraint at the IdP, but believe that an SP solution will be easier to implement and maintain.

The sessionHook  attribute looks like it could potentially be used to block additional sessions for a user, but I’m not sure if there is a way to determine if other sessions already exist.

Any help or insight into this issue is much appreciated.

Thanks,

--Mike




This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and any disclosure, copying, or distribution of this message, or the taking of any action based on it, by you is strictly prohibited.

v.E.1







-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130731/ea7c91b5/attachment.html