Hi there, Shiro (currently) never throws ConcurrentAccessException itself. Your realm implementation is responsible for checking to see if the current user is already logged in, and if so, throw new ConcurrentAccessException. In other words, it is a class available for your convenience - but you are required to throw it based on your business logic needs.
HTH, Les Hazlewood CTO, Stormpath | http://www.stormpath.com | 888.391.5282 twitter: @lhazlewood | http://twitter.com/lhazlewood blog: http://leshazlewood.com stormpath blog: http://www.stormpath.com/blog/index
