Prevent same user from logging in from 2 different IP addresses

[nfarquharson]

Many companies now implement stronger user management policies.

One that we commonly hear is having the ability to prevent a user from logging with the same credentials from two different IP addresses.

This will help prevent users from sharing login credentials with other employees who aren't formally authorized to have access.

[KarlKlapper]

I added this to category "Business and System Administration", since we do not currently have a category for "Security, identity management and authentication".

[mdebower]

I could maybe see prohibiting logging in from two different IP addresses AT THE SAME TIME.  Your suggestion isn't clear on this point.

I think there are legitimate use cases for logging in on two machines with the same credentials.

• test machines.  For example, when upgrading software on a client machine, you may want to have a test machine before rolling out the upgrade.
• Conference room or other shared computers. My company doesn't have a lot of laptops, and no Pro/E user does, we have computers in the conference rooms to use. So we would need the ability to log from both machines.
• "Borrowing" a machine for a short period, etc...
• Home and Work.  I routinely log into Windchill from my home computer for various reasons.
• Workstation and Laptop.  One person with a workstation for CAD work, laptop for other tasks.
• ETC...

[STEVEG]

Marc,

I agree with you.  I log in on two different computers a lot for testing purposes.  Or even when I go to help a user and I have to do something under my login.  I don't want to have to go back to my desk, close out the browser or Creo, then go back to the user's desk.

So there could be an option that allows companies to switch the option on or off.

And to take it a bit farther...allow to turn it on for regular users but not for admins.

[mmuth]

We have pretty strict password requirements - including never sharing your password. But we can be logged into as many machines as we like - good thing, as I'm usually on multiple servers all day. So even having people logged into multiple PCs at the same time is not an issue.

[STEVEG]

If Neil were to incorporate that into the product idea would you still be against this?

I agree it shouldn't be set that way as a default.  But just to allow an option?

[olivierlp]

Hello,

We are archiving your idea as part of a general review. This action is based on the age of your idea and the total number of votes received, as per this announcement.

You can always post a new idea with all the details required in the form.

Thank you for your participation.