---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Activate Limit Concurrent Sessions Plugin

# Activate Limit Concurrent Sessions Plugin {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure the com.glide.limit.concurrent.sessions plugin to reduce the chance of session hijacking on your instance.
The Limit Concurrent Sessions plugin (com.glide.limit.concurrent.sessions) allows an administrator to limit the number of active sessions per user/role. It is recommended this plugin be enabled and configured to reduce the
likelihood of session hijacking. If this plugin is enabled and configured, there will be a limit to the number of open sessions that can be hijacked.

## More information {#sc-limit-concurrent-sessions-plugin__section_qhx_1b1_xwb}

{#sc-limit-concurrent-sessions-plugin__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | * com.glide.limit.concurrent.sessions (plugin) * glide.authenticate.limit.concurrent.interactive.sessions(system property) * glide.authenticate.max.concurrent.interactive.sessions(system property) {#sc-limit-concurrent-sessions-plugin__ul_pzf_hcz_vgc} |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | * plugin * system property (Boolean) * system property (Integer) {#sc-limit-concurrent-sessions-plugin__ul_h2y_r2w_zgc}plugin |
| Recommended value | * com.glide.limit.concurrent.sessions is enabled * glide.authenticate.limit.concurrent.interactive.sessions system property set to true * glide.authenticate.max.concurrent.interactive.sessions set to a numeric value depending on the needs of your organization. {#sc-limit-concurrent-sessions-plugin__ul_wfb_p2w_zgc} |
| Default value | None |
| Category | [Session management](https://www.servicenow.com/docs/BjjvH7NbZWponRYVuTElEA "This category looks at the security of the application state for a user. Sessions should be unique to each individual, unable to be guessed or shared, and invalidated after periods of inactivity or when not required. This includes factors such as cookie attributes for cookie-based sessions, session token generation, and storage and requirements for federated re-authentication.") |
| Security risk | * Severity score: 3.7 * CVSS score: Low * Security risk details: Higher numbers of active concurrent sessions creates security risk by increasing the attack surface for account compromise, making it harder to detect unauthorized access and enforce session accountability across devices and locations. {#sc-limit-concurrent-sessions-plugin__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-limit-concurrent-sessions-plugin__table_ajc_b43_3kb}