In SAP Hybris, how can we control multiple session of the user.

[former_member661114]

In our case a user can login to our multiple through multiple browsers and channels, we want to avoid such scenarios and want to kill all the existing sessions and the user should be logged off from other browsers.

How can we implement the same in Hybris?

[a_e_dubey]

Hi jmongia

I think there is no functionality comes out of the box i.e you need to implement from your self.

This is totally based on spring security because spring security framework is used for authentication and authorization to create JSESSIONID or HttpSession.

There can be two ways where user can be restricted to login from multiple sessions.

It may be previous session of user be removed, or new session of user be disallowed. So just try to see HttpSessionBindingListener also look at below link for more info.

Disable multiple logins for same user - Servlets and Sessions

Also Look at below given links:

Link1

Link2

I hope this will help you to at least start in a direction.

[srini_y]

I was able to achieve this in Hybris. Please refer to the https://answers.sap.com/answers/13127236/view.html for detailed explanation.