{"id":1594,"date":"2020-07-09T13:17:36","date_gmt":"2020-07-09T13:17:36","guid":{"rendered":"https:\/\/sdf-docs.mansystems.com\/docs\/acr-rules\/security\/users-should-be-signed-in-with-a-maximum-of-one-session\/"},"modified":"2021-07-30T09:09:53","modified_gmt":"2021-07-30T09:09:53","slug":"securityallowonesessionperuser","status":"publish","type":"docs","link":"https:\/\/sdf-docs.clevr.com\/?docs=acr-rules\/security\/securityallowonesessionperuser","title":{"rendered":"Users should be signed in with a maximum of one session"},"content":{"rendered":"\n<p>  Introduced in version 1.12 (12 August 2020)  <\/p>\n\n\n\n<p>Users should only be able to be signed in through one client, like a desktop browser or a tablet, so that every sign in is unique and can be traced to its corresponding user. <\/p>\n\n\n\n<p><strong>Non-compliant example:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"642\" height=\"736\" src=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/07\/noncompliant-one-session-per-user.jpg\" alt=\"\" class=\"wp-image-1596\" srcset=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/07\/noncompliant-one-session-per-user.jpg 642w, https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/07\/noncompliant-one-session-per-user-480x550.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 642px, 100vw\" \/><figcaption>If multiple sessions per user is enabled, users can be signed in on different clients, like a desktop browser and a tablet. However, this might encourage account sharing and\/or exploitation.<br><br>Mendix 8 Project Runtime Settings<\/figcaption><\/figure>\n\n\n\n<p><strong>Compliant example:<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"642\" height=\"736\" src=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/07\/compliant-one-session-per-user.jpg\" alt=\"\" class=\"wp-image-1597\" srcset=\"https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/07\/compliant-one-session-per-user.jpg 642w, https:\/\/sdf-docs.clevr.com\/wp-content\/uploads\/2020\/07\/compliant-one-session-per-user-480x550.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 642px, 100vw\" \/><figcaption> Mendix 8 Project Runtime Settings <\/figcaption><\/figure>\n\n\n\n<p>In Project Runtime Settings set <em>Multiple sessions per user<\/em> on <strong>No<\/strong>.<\/p>\n","protected":false},"featured_media":0,"parent":96,"menu_order":26,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-1594","docs","type-docs","status-publish","hentry"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/1594"}],"collection":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/types\/docs"}],"replies":[{"embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1594"}],"version-history":[{"count":1,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/1594\/revisions"}],"predecessor-version":[{"id":1598,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/1594\/revisions\/1598"}],"up":[{"embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/96"}],"next":[{"title":"Use user libraries without security vulnerabilities","link":"https:\/\/sdf-docs.clevr.com\/?docs=acr-rules\/security\/securityjarvulnerability","href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/2145"}],"prev":[{"title":"The default administrator name should be changed","link":"https:\/\/sdf-docs.clevr.com\/?docs=acr-rules\/security\/renamemxadmin","href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=\/wp\/v2\/docs\/241"}],"wp:attachment":[{"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1594"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/sdf-docs.clevr.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdoc_tag&post=1594"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}