Unable to restrict concurrent user logins in AEM
This article provides suggestions for addressing the lack of concurrent login limits in Adobe Experience Manager (AEM), focusing on Identity Provider (IDP) security measures to reduce the risk of identity-based attacks and restrict the use of compromised credentials.
Description description
Environment
Adobe Experience Manager (AEM)
Issue/symptoms
- AEM currently lacks the functionality to limit concurrent logins for a single user.
- This limitation can lead to potential security vulnerabilities, as users are unable to detect unauthorized or malicious logins occurring simultaneously with their own sessions.
- Some security audits may identify this as a significant vulnerability.
Resolution resolution
To enhance security, follow these steps:
- Use IDP security features like IP filtering, certificates, and two-step verification to help keep your password safe and stop others from using it without permission.
- Use IDP to monitor for excessive login attempts and logins from multiple or unusual locations.
- A custom concurrent login solution can be developed by the customer to manage and limit the number of concurrent user logins.
For further assistance or updates, refer to the official release notes or contact Adobe Support.
recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f