Can Multiple Users Share the Same Session ID
Sep 10, 2025
Overview
Applies To
- Session ID
- Shared Session ID
Solution
The session_id is not bundled to the user.
After an active session is established, if another user login in the context of the session (e.g. sending the session to Auth0), the session will be updated to the new user.
This can be achieved by the following methods:
- If Seamless SSO is enabled, pass the `prompt=login` to the `/authorize` reqeust. This will enforce the login page to be displayed, and the user could login via a different account.
- If Seamless SSO is disabled, the login page is always displayed, no matter whether there is an active session or not. So the user can login via a different account.