I used a static global synchronized list with logged in users and thrown ConcurrentAccessException in the realm if the list already contained the username
http://shiro-user.582556.n2.nabble.com/how-to-configure-Shiro-to-receive-ConcurrentAccessException-td7405855.html http://shiro-user.582556.n2.nabble.com/how-to-configure-Shiro-to-receive-ConcurrentAccessException-td7405855.html -- View this message in context: http://shiro-user.582556.n2.nabble.com/How-to-know-if-a-user-is-already-authenticated-tp7437178p7442419.html Sent from the Shiro User mailing list archive at Nabble.com.