Logged in another browser session?

[nermin.tanovic]

hi. I have a requirement that users must be able to open multiple browser sessions of same app.
is there a way to determine if user is already logged in another session, and if yes - bypass login and mfa. is that even possible? thank you.

[pratyush.pandey]

There is no built-in feature in Auth0 that prevents multiple logins from different sessions or allows you to bypass login and MFA if the user is already logged in another session

Prevent multiple logins from different sessions

Hi! First of all, maybe this is a repeated question, sorry about that! I’m pretty new to Auth0, but there is a functionality that we need to implement for a current project: once an user is logged in, he shouldn’t be able to log in again, simultaneously, using the same user in another session (i.e. different browsers, etc). With the default configuration it is possible, and I can’t find any option to disable this “multiple login” behaviour. Thanks for the help!!

However, there are some possible workarounds that you can try:

• Use a custom domain for the customer-facing application and use your Auth0 canonical domain for the admin application. The different domains allow for the two sessions to exist at the same time.

• Set allowRememberBrowser to true when enabling MFA. This will allow the user to skip MFA for 30 days by storing a cookie in the user’s browser. You can also set acr_values to when calling the /authorize endpoint to require MFA.

Hope this helps