Logged in sessions details in Gigya(CDC)

[Former Member]

Hi Guys,

We have a business case where we want to have only 1 account active on a mobile device even if the app is downloaded on multiple devices. What we want to achieve is for Mobile devices only the web sessions are not to be impacted. We have a functionality for Gaming where you can only play in one device hence we need to kill any other active session on any other device for that user. I am looking for the API's which can provide the data is there is any other logged in session present for the given UID and on what sdk(Device or Web). I could check the Audit log which has this information but not sure of retrieving the logs history since the mobile sessions live for ever so this may be a performance impacting approach.

Can you help to get an API endpoint which provides the details of logged in sessions and devices for a given UID and an endpoint which only kills a specific device session.

Thanks

Vineet

[Former Member]

Hi spu230479 Thanks for the suggestion. I may have to go down the custom route to manage this, but is it possible to log out the user from a device specifically. As part of the experience I do not want the user to see the message that he/she needs to first log out from other device and only then can use the new one but rather have it more seamless and we in the backend can kill the session on old device and continue on the new device. For doing so I would specifically need to kill the session on a particular device so the question.. can i kill a particular session from the log out api or any other terminate session endpoint if possible.

Thanks

Vineet

[spu230479]

Hi vineet.kaul it's currently not possible using OOB functionality to terminate a session on a different device. Using the accounts.logout REST API with the accounts UID you can log out a user from all active sessions. Typically the mobile sessions would be long life sessions and the Web sessions would be short life so this may fit your use case. With some custom development there may be other mechanisms that we could suggest to terminate a specific session via a serverside process however I'd recommend engaging with Professional Services or your CEE to arrange a session with an expert so we can fully understand your use case and scenarios to make the best possible recommendation for your application.

Thanks

Stephen

[spu230479]

Hi vineet.kaul currently we do not have a service that can monitor the devices that are currently active. If this is a feature that you require I would recommend creating an Idea within our Idea's Portal.

There would be methods however how you custom build into your Mobile Applications way's to restrict the number of active sessions that would be permitted on mobile devices. One method would be to using a custom attribute to store an active mobile session and to nullify this attribute when the user logs out. You could then use Extensions when the user authenticates from a different mobile device to validate they don't have an active session running on another mobile device. If they do you would be able to return an error from the extension and prevent the user authenticating from that device until they have logged out of their other session.

For more details on how you could implement such solutions I'd recommend reaching out to our Professional Services teams.

Thanks

Stephen