Restrict users to a single session
Check ID
APP_0011
Category
Security
Summary
The Mendix runtime can be configured to enable users to have multiple sessions with the server. If this option is enabled, users can sign in multiple times through different clients (for example, desktop browser and tablet). Otherwise, an existing session for a user is signed out when the user signs in somewhere else. For increased security is is recommended to restrict users to a single session.
Options
There are no options for this check.
Pass
The setting Multiple Sessions per User in the Mendix runtime settings for your project is not enabled.
Fail
The setting Multiple Sessions per User in the Mendix runtime settings for your project is enabled.
Last updated