Session management
Delphi Auth tracks browser sessions in Redis so deployments can cap concurrent sessions per user, revoke sessions on privileged role changes, and enforce idle / absolute timeouts consistently across TelWeb.
Concurrent sessions
Operators can configure a maximum number of concurrent sessions per user. When the cap is reached, new sign-ins are rejected (or older sessions are displaced, depending on deployment policy). If a finite cap is configured and Redis is unavailable, sign-in fails closed rather than skipping the cap.
See the Auth-related keys in the environment variable index (session max, idle, and absolute timeout settings).
Revocation
- Signing out ends the current session.
- Super Admin role promotions / demotions invalidate affected sessions so the new privilege set is forced on next sign-in.
- Access logs record login, logout, and session-end events — see Access logs.
Microsoft Entra SSO
SSO sessions follow the same concurrent-session and revocation rules after Delphi maps the Entra identity to a local user. See Microsoft Entra SSO.