How to implement a Device Binding Flow where we can restrict a user account to have fixed number of devices that can login at a time. Is there a solution from Auth0 itself or is there any 3rd party provider that we can use to do this?
Hi there,
Welcome to the Auth0 Community!
I understand that you are looking for a solution to limit the number of devices that a user can use to login at any given time.
While at this moment we do not offer an out-of-the-box solution for implementing this type of restriction, it should be possible to use a Post-Login Action to setup a flow that enforces this restriction. You can access the event.request.user-agent attribute from the Event Object to help identify the device attempting to log in and implement custom logic that denies access as needed. This was previously brought up on the Restrict multiple devices for a user topic, which I recommend reading through.
In addition, it would be very helpful if you would submit a Feature Request detailing the flow that you are looking for and it’s utility. Our Product team monitors the page and users have the ability of casting their votes on the Features they want to see implemented. Please do not forget to vote, as topics with higher votes help prioritize the features to be implemented.
Please reach out to us for any other issues or requests, we will gladly look into it for you!
Have a great one!
Gerald