14
Security Best Practice Guide
Enforce Login Uniqueness
As a layered security precaution, users should only be allowed to login to a single session. Allowing multiple
logins with the same username can lead to an increased risk of a security breach.
You have two options for logging the user out if they try to log in using the same username twice:
• Automatically logout existing session
o This means the users first session would be disconnected immediately
• Confirm Logout of existing session
o This would require the user to confirm that my proceeding, their original session will be
terminated
Either choice can be used to effectively enhance security.