Preventing user logging in twice to OID

Question

I have an ASF application that I am using SSO to protect and authenticate against the OID (Identity Management 10.1.4)
How can I prevent the same user id logging on more than once simultaneously ?
Cheers,
Brent

Answer 1

This is my trigger:
--begin of trigger
CREATE OR REPLACE
TRIGGER PORTAL.XX_CHECKSESSION BEFORE INSERT ON PORTAL.WWCTX_SSO_SESSION$
FOR EACH ROW
DECLARE v_log NUMBER;
CURSOR c1 IS
SELECT portal.wwctx_sso_session$.id
FROM portal.wwctx_sso_session$
WHERE UPPER(portal.wwctx_sso_session$.user_name) = UPPER(:NEW.user_name)
AND portal.wwctx_sso_session$.active = 1;
BEGIN
v_log := 0;
SELECT COUNT(portal.wwctx_sso_session$.active)
INTO v_log
FROM portal.wwctx_sso_session$
WHERE UPPER(portal.wwctx_sso_session$.user_name) = UPPER(:NEW.user_name)
AND portal.wwctx_sso_session$.active = 1;
IF(v_log > 0) THEN
--portal.WWSEC_APP_PRIV.LOGOUT;
--portal.WWSEC_API.DEACTIVATE_PORTAL_USER(:NEW.user_name);
FOR c1_rec IN c1
LOOP
portal.wwctx_sso.clear_sso_session(c1_rec.id);
END LOOP;
END IF;
END;
--end of trigger
So i test this by logging in once with user_test and the login process is ok but when i try to logout it gives me the following "horror" and redirects me to the portal which shows the user logged in:
"Invalid Portal Session
An error was encountered while processing your Portal request, because your portal session is no longer valid."
The tests were done without login of a second user.
What's the verdict? ;)
Thanks a lot,
Irina