BIG-IP APM: Max Concurrent Users and Enable users to terminate a specified session

Requirement : The requirement is 2-fold -

 

• A way to identify if more than 1 user is actively logged into a system & restrict it
• When the threshold is exceeded, display the logon details of previous user who is active and a way to terminate their session if required.

Now, i understand there's a setting "Max Concurrent Users" in the APM profile, which will address the first part of the requirement, but that address below concerns

 

1. it doesn't check whether the concurrent users are logged into the system, it just rejects the 2nd person trying to open the URL itself
2. it doesnt give an option to terminate the required user session, so trying to come up with the custom logic.

Also while searching across on this, found the below article, which talks about restricting max sessions per user, which works great if the requirement was just to restrict any single user from creating more than 1 active session (1 user/1 session), but would like to append this for total number of users.

 

https://devcentral.f5.com/articles/big-ip-apm-max-sessions-per-user-enable-users-to-terminate-a-specified-session

 

Appreciate any help/support !!

 

Thanks