How to do Session Management using the miniOrange 2-Factor Authentication plugin for WordPress?

Pre-requisites : Download And Installation

• You need to configure the 2FA plugin before following this guide.

Getting started with the setup

Let’s see how an administrator can do Session Management of users.

1. Limit Simultaneous Sessions

This option allows you to limit the number of active sessions a user can have at the same time.

• Go to the 2FA Configuration tab in the miniOrange 2-Factor Authentication plugin, and then click on the Advanced Features subtab.

• Go to the Session Management settings.
• Select the checkbox to enable the Limit Simultaneous Session option.
• Enter the maximum simultaneous session allowed in the input field.

• When the session limit is reached, you will have two options to proceed:

1. Allow Access: When enabled, the user logs in but ends all other active sessions when the session limit is reached.
2. Deny Access: When the session limit is exceeded, the user will not be allowed to log in.

(I have selected the second option in this.)

• Then, click on the Save Settings button.

• When the user tries to log in after reaching the session limit, the following message will be shown:




2. Limit Session Time

This option allows you to limit the user's session duration. Once the limit is crossed, the user will be automatically logged out and will need to log in again.

• Select the checkbox for the Limit Session Time option.
• Enter the number of hours for which the user session should remain active.
• Then click on the Save settings button.

Additional Resources

• WordPress miniOrange 2-Factor Authentication
• Configure 2FA Settings
• Remember Device to Bypass 2FA
• Remember IP to Bypass 2FA
• Setup 2FA on any Login Form
• Passwordless Login

If you have any additional questions or further concerns, please don't hesitate to reach out. You can always drop an email to our support team at mfasupport@xecurify.com and we'll be happy to assist you.