How can block multiple session with seraph in confluence?

[Felipe Vasquez]

Hi,

I want to control the use of a user account by several people on different computers at the same time. What I need is login and check if there is a session with that user account on the server and if there is not allowed access until the other person is disconnected.

is possible with seraph do this?

[Thomas Schlegel]

hmm, same discussion as in the old question...

Felipe, I don't think that there will be a good technical solution for your problem. What your customers do is forbidden, maybe, ok. But I don't think that you can do something about it except look at the logins and, if there are too many simultanous logins for one account, grab your phone and ask for an explanation... I think, this is also no good solution...

[Nic Brough -Adaptavist-]

So you have deleted (or deactivated) the shared accounts. Good. I'm not sure what the question is now?

[Felipe Vasquez]

How you can see Nic , the "shared ones" is not visible in the panel, even in general config not appear. we have the confluence 4.2.7. Thanks

[Felipe Vasquez]

How you can see Nic, in this panel not appear the option shared ones, even in general config is not included. Thanks

[Nic Brough -Adaptavist-]

Um, you create new user accounts for the users, then deactivate the shared ones (Remove from all groups and roles). I'm not sure I can explain this any other way.

[Felipe Vasquez]

Hi Nic, How can I do this? Is acctually the thing we are looking for.

[Nic Brough -Adaptavist-]

Ok, so simply give them their own accounts, delete the shared ones, and you've fixed the problem. Doesn't matter if human A then logs in three times on three machines - they're only able to work on one at a time.

[Felipe Vasquez]

Sharing accounts is not legal, but in practice it does. We do not want to continue sharing accounts because the accounts confluence we sell to businesses and hurts us the fact that a company uses an account for use by all employees. The idea is to privatize each account for personal use.

[Nic Brough -Adaptavist-]

I'm still not sure what the actual requirement here is. I actually think most of it is on the human side.

Do you have shared accounts where two (or more) humans log into the same account from different places? Is this actually legal in your field (it's not in finance, security, trading, military systems and so-on)?

If it is ok, then what is the actual problem with two people logging in at the same time? The audit trail is irrelevant, so where is the harm in letting them access it at the same time?

On the technical side, how do you know which session is "more important"? Time? Timeout? You can, as suggested before, simply whack the timeout value down low, that solves that problem.

[Felipe Vasquez]

Hi Thomas,

I still can not solve my problem and this question in more specific than the other

[Thomas Schlegel]

Hi,

you asked nearly the same question here last year and there were discussions and suggestions until January this year. Why do you open up a new question ?

Cheers

Thomas