ARTIFACTORY: How to block simultaneous login of a user in Artifactory

ARTIFACTORY: How to block simultaneous login of a user in Artifactory

AuthorFullName__c
Tatarao Vana
articleNumber
000005274
ft:sourceType
Salesforce
FirstPublishedDate
2022-05-18T06:16:12Z
lastModifiedDate
2024-03-10T07:43:58Z
VersionNumber
3

If you have a requirement to restrict the concurrent login sessions for a single user account, we can achieve it by settings the block-simultaneous-login value as true in the Access YAML Configuration file located under $JFROG_HOME/artifactory/var/etc/access directory. By default, this value is set to false.

When block-simultaneous-login value is set to true, Access will revoke the User's session tokens when a new session token is created for the same user. Follow the below steps:

1. Take the backup of access.config.latest.yml file located under the $JFROG_HOME/artifactory/var/etc/access directory.


2. Edit the file and set the value as block-simultaneous-login: true and here is the sample snippet.
security:
token:
  block-simultaneous-login: true


3. Save the access.config.latest.yml file as access.config.import.yml 

4. Restart Artifactory instance to bootstrap the above configuration.