Can Multiple Users Share the Same Session ID

Knowledge Articles
1

Last Updated: Sep 24, 2024

Overview

This article clarifies whether multiple users can share the same session ID, respectively, to have multiple users in one session.

Applies To

  • Session ID
  • Shared Session ID

Solution

The short answer is yes.

The session_id is not bundled to the user.
After an active session is established, if another user login in the context of the session (e.g. sending the session to Auth0), the session will be updated to the new user.

This can be achieved by the following methods:

  1. If Seamless SSO is enabled, pass the prompt=login to the /authorize reqeust. This will enforce the login page to be displayed, and the user could login via a different account.
  2. If Seamless SSO is disabled, the login page is always displayed, no matter whether there is an active session or not. So the user can login via a different account.
1 Like