How Can We Help?
HEAL employs various measures to ensure security and prevent unauthorized access, including:
- Session Timeout: The session will automatically expire if the browser is idle while logged in.
- Login Session Validation: If a user logs into the HEAL UI from multiple browsers or devices, HEAL validates one login session and invalidates the others. Any actions from the invalidated sessions will be logged out to prevent unauthorized access.
By default, Keycloak’s implementation does not restrict user sessions. To enable this functionality, you should implement EventListenerProvider in Keycloak.