0

We have a requirement that need to restrict multi browser login with same user into SharePoint. We have 2 AD, 1 for external user and 1 for internal user. Our SharePoint site was integrated with AD. When the user accessing the portal, they will be redirected to AD home page to choose the AD. Once they choose the AD option, they will be redirected to appropriate AD login page. After validate, they will be redirected to SharePoint Home Page.

We need to implement once the user session established, we should not allow the user login from another browser. Please guide how to implement this functionality.

Improve this question

1 Answer 1

Reset to default
0

You'd have to write some javascript in the masterpage that identifies the tab and makes sure there is only one session open by window or tab id.

See: https://stackoverflow.com/questions/11896160/any-way-to-identify-browser-tab-in-javascript

And: https://codereview.stackexchange.com/questions/70170/restricting-user-to-one-open-tab-in-browser

Improve this answer
9
  • And to prevent using another Browser? quote: "we should not allow the user login from another browser."
    – Danny '365CSI' Engelman
    Mar 8, 2017 at 18:27
  • every tab/window will have it's own window/tab id. You could restrict based that. Just a theory, no POC. Also if you wanted to restrict Firefox/Chrome and only allow IE, you can also do that using JavaScript.
    – Mike
    Mar 8, 2017 at 18:45
  • And the scenario where 2 devices are you used? Only option is the Server records who is logged in... and you will run into the challenge.. How does the server know a user is no longer logged in?
    – Danny '365CSI' Engelman
    Mar 8, 2017 at 19:03
  • Another device would deem another session. There is server side code to retrieve the session or token, but not sure about retrieving using javascript. That would be quite difficult to manage in my opinion.
    – Mike
    Mar 8, 2017 at 20:03
  • We theorized about storing the session in the users Profile. But we never could put a sure way of the logout-challenge on the whiteboard.. In the end the customer did not want to pay for the hours.. and said "well.. it isn't really a problem"... ah yes.. customers with requirements..
    – Danny '365CSI' Engelman
    Mar 8, 2017 at 20:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.