Enforce user single session across devices/browsers

[zaic20]

Hi All,

is it possible to enforce a single session across devices (Browser) in someway? The requirement is to invalidate the mod_auth_openidc session active on an another browser/device if the user starts a new session.

I cannot find anything related to this.

Thanks so much

[zandbelt]

no that's not possible

[zaic20]

@zandbelt after 1 year, do you have any news on this? there is any plan to implement this control? In case do you have any suggestions on how to enforce single user session across browsers?

[zandbelt]

no, no plans either: it is practically impossible to guarantee (poor man's solutions set aside)

[zaic20]

Thanks @zandbelt, much appreciated!!!