Idea Details

Control the Concurrent Users Logged to PAM

Last activity 06-03-2019 08:38 PM
tsede01's profile image
08-01-2016 02:06 PM

Implement on CA PAM the ability to control the concurrent users logged to CA PAM user interface.


So, for a particular user, I can allow or forbid more than one concurrent session.


Currently, CA PAM does not offer this capability. Then, in order to cover this gap we have to include CA SSO + Limit Concurrent Login GD add-on.


10-06-2016 03:44 PM

Hi tsede01 - Very good idea.  We have added this to the wishlist for future consideration.  We will update you if and when this is marked for a release.




08-26-2016 11:18 AM

Hi tsede01,


That does help.  Also, curious why do customers want (or need) to limit concurrent sessions?  Is it a security concern to have multiple sessions? Performance? Some other reason?

08-26-2016 10:58 AM



The Use Case is quite simple.


Ability to CA PAM has the control of simultaneous user login. With this feature we can be able to allow or deny more than one session of a particular user/group of users.


OBS1.: this is related to the User login to CA PAM interface, not related to the ability to control exclusive session with a particular target account (which, by the way, we support).


OBS2:  this feature has been asked in some process so we believe that our competitors may already have it out-of-the-box.


OBS3.:  in order to fulfil this requirement we need to compose the solution with CA PAM + CA SSO + CA SSO Add-On component called Limit Concurrent Login which costs the same as a PAM virtual appliance!





Does this make sense now?


Please let me know if you need further clarification





08-25-2016 04:14 PM

Hi tsede01 thank you for your idea.  This is currently under review.  Can you elaborate on the use case for limiting users?


cc dulmi01 brotr03