How to stop different users logging in at the same time

[remixed123]

I have set up Thingworx with forms login, some of my users have multiple logins, as they look after other users. If they happen to already be logged into a user account and then in the same browser login again, it causes issues with the sessions data which I store in the user extensions properties.

I need as way to stop multiple logins occur on the same browser, I would be happy of there was a way to know if a user was logged in already or not, so I could then redirect the user to the home page.

I have been trying to make changes to the FormLogin.jsp page, but have had no luck so far. Is there anything I can do to see if a user already logged in from the FormLogin.jsp page? Or any other suggestions on handling this situation?

[posipova]

This wouldn't be possible without implementing custom authentication code.

[remixed123]

Where can I implement custom authentication code? I need to make sure that only one user is logged in at the same time, otherwise there will be issues with the user data being shared.

[wcui · Accepted solution]

Please check below online help and refer to Authenticator Sample Extension Configuration link 

You can implement your own logic to accpet or reject user sign-in

http://support.ptc.com/help/thingworx_hc/thingworx_8_hc/en/index.html#page/ThingWorx/LoginAuthenticators.html#wwID0EXZOY

Besides, you can use SecurityMonitor  to monitor user sign-in status. Below article introduced how to use it.

https://www.ptc.com/en/support/article?n=CS266487