# Experience user limitation

**URL:** <https://forums.losant.com/t/experience-user-limitation/2827>\
**Category:** Help\
**Tags:** experience\
**Created:** [April 14, 2020, 8:22pm UTC](https://forums.losant.com/t/experience-user-limitation/2827 "2020-04-14T20:22:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lars\_Andersson](https://avatars.discourse-cdn.com/v4/letter/l/f05b48/32.png) [@Lars\_Andersson](https://forums.losant.com/u/Lars_Andersson)\
**Post date:** [April 14, 2020, 8:22pm UTC](https://forums.losant.com/t/experience-user-limitation/2827/1 "2020-04-14T20:22:17Z")

</div>

I would I best limit an experience user name from being used by multiple people concurrently?

---

<div class="post-metadata">

**Author:** ![JuliaKempf](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.losant.com/juliakempf/32/2446_2.png) [@JuliaKempf](https://forums.losant.com/u/JuliaKempf)\
**Post date:** [April 14, 2020, 9:59pm UTC](https://forums.losant.com/t/experience-user-limitation/2827/2 "2020-04-14T21:59:13Z")

</div>

Hi @Lars_Andersson,

I just want to ensure I am reading your question correctly, are you asking how to prevent multiple individuals from signing in under one username and password?

Thanks,  
Julia

---

<div class="post-metadata">

**Author:** ![Lars\_Andersson](https://avatars.discourse-cdn.com/v4/letter/l/f05b48/32.png) [@Lars\_Andersson](https://forums.losant.com/u/Lars_Andersson)\
**Post date:** [April 14, 2020, 10:22pm UTC](https://forums.losant.com/t/experience-user-limitation/2827/3 "2020-04-14T22:22:10Z")

</div>

Yes, I would like to prevent this from happening.

---

<div class="post-metadata">

**Author:** ![JuliaKempf](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.losant.com/juliakempf/32/2446_2.png) [@JuliaKempf](https://forums.losant.com/u/JuliaKempf)\
**Post date:** [April 15, 2020, 2:40pm UTC](https://forums.losant.com/t/experience-user-limitation/2827/5 "2020-04-15T14:40:53Z")

</div>

Hi @Lars_Andersson,

The current recommendation is that you enable the `invalidate any previously existing authentication tokens` in your Authenticate Node. This will allow for only one active session for the user, forcing a log out each time a different individual attempts to log in with the same credentials.

Please let me know if I can answer any further questions!

Thanks,  
Julia