title: User session management in asp.net
body: <p>my client has had a security audit of a system I built for them complete.</p>
  
  <p>They want it to work in such a way that if a user logs in via Internet Explorer that when they login via Firefox on the same machine (or via IE on another machine) that it kills the first session.</p>
  
  <p>Essentially this means storing session info in the DB i would imagine and then setting an active/inactive flag against it so user id, session id, status if userid has an active session, then kill first session, and create new session.</p>
  
  <p>Are there any built in mechanisms for doing this with the .NET framework or can anyone point me in the direction of some tutorials etc.</p>
  
  <p>Many thanks,</p>
  
  <p>Ed</p>