Issue

As an administrator I would like to enforce user activity as this will help prevent people from sharing login names / credentials, restricting their access to the application by X active sessions. This is a security concern that would limit unauthorized access to a user account, and limit users to specific simultaneous sessions.

Example:

• User would like the ability to lock out accounts from multiple remote machines
• Logging in as a user on a browser should expire all existing sessions for that user

Resources

• https://docs.spring.io/spring-security/site/docs/3.0.x/reference/session-mgmt.html
• http://www.baeldung.com/spring-security-session