Task 2 - Progress

Task:

• Authentication and Session Management
• variable session timeout for different user/groups
• 10min grains - no timeout
  
• one session only per loginID
• prompt for session overwrite
• User Login Management Portlet
• manage users' session time out
• tracks the users login/logout history
• force log out of users

One session per loginID is simply done by tweaking the portal properties file, portal-ext.properties
Here's the critical line to take note of. Makes very good sense actually.

auth.simultaneous.logins=false

To force log out of users would mean the kill session feature already implemented in the admin portlet. Another one down.

Now the variable timeout... hmm...