How to allow users to only have one active session? and configure session time out?

[Mohamed Saad Taha]

Dears ,

Iam using Jira datacenter and I need to limit the access for the users to only one active session and also to configure time out for the sessions 

BR,

[Joseph Chung Yin]

@Mohamed Saad Taha -

In addition to what @Jerrold - Empyra suggested, take a look at the following KBs on user session control - 

https://confluence.atlassian.com/jirakb/how-to-change-the-default-session-timeout-to-avoid-user-logout-in-jira-604209887.html

https://wiki.resolution.de/doc/saml-sso/latest/all/knowledgebase-articles/technical/users-frequently-logged-out

https://confluence.atlassian.com/jirakb/invalidating-user-sessions-in-jira-data-center-1217298787.html

Hope this also helps.

Best, Joseph Chung Yin

Jira/JSM Functional Lead, Global Technology Applications Team

Viasat Inc.

[Rami Zarif]

You can use this add-on
https://marketplace.atlassian.com/apps/1230809/session-manager-for-jira

[Jerrold - Empyra]

Hi 

To restrict users to only one active session and set up session timeout in Jira Data Center, it is typically necessary to configure this at the application level as well as potentially at the server or load balancer level. Here's a general guideline on how you can accomplish this:

Session Management in Jira:

• Jira provides certain session management options, although they may not include all the specific features required by default.
• To manage sessions within Jira, navigate to Administration > System > General Configuration, and then locate the Session timeout settings. However, this might only cover the session timeout and not necessarily restrict users to one active session.

Implementing Single Active Session Limit:

• It may be necessary to implement this as a custom solution or utilize third-party plugins that offer session control features.
• Explore available plugins in the Atlassian Marketplace that provide session management features. For example, plugins like "Jira SAML SSO" or "Jira OAuth/OpenID Single Sign On (SSO)" might offer session control options.

Thank you.