Disable Multiple logins

45 views
Skip to first unread message

uvaraj s

unread,
Nov 16, 2016, 2:44:33 PM11/16/16
to CAS Community
Hi, 

  Is there a way in CAS to prevent multiple logins from the same account (same userid)?.When the same account logs in the first login should get invalidated automatically. We have CAS acting as the authentication provider and user MySQL database.

Regards,
Uvaraj S

Uxío Prego

unread,
Nov 17, 2016, 7:06:35 AM11/17/16
to CAS Community, suv...@gmail.com
I do not know yet which is the current upstream recommendation for that, but I can tell you what we do then you think if is of use for your case.

For CAS 3 we developed a custom support module (cas-server-support-blahblah) that we link from our edited cas-server-webapp module's deployerConfigContext.xml and use its BlahblahAuthenticationHandler that extends AbstractJdbcUsernamePasswordAuthenticationHandler in which after checking that the credential is correct, we check how many TGTs are assigned currently to the user, and prevent further logins if a limit has been reached.

If we wanted to do what you want, instead of checking the count of TGTs assigned to the user we would invalidate them.

So I think the answer to your question is a yes, assuming that same freedom is available for CAS 4 and 5 too; but it is up to you if it makes sense for your case in terms of your development costs and effort.

Hope that helped.

Uxío Prego

Madiva Soluciones
Cl / Serrano Galvache 56 E Abedul 4
28033 Madrid

917 56 84 94
www.madiva.com

The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic loading of images to hamper it.

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/9373c409-a733-4dc6-a85d-1333064882af%40apereo.org.

Reply all
Reply to author
Forward
0 new messages