I am using oAuth 2.0 Web server flow to connect to Salesforce org and get the Access token and refresh token. I use the following URL to access a visualforce page that resides within the Salesforce org:


I am able to sign in using this URL and this session ID across multiple browsers (same network and different network). My page contains sensitive client information and I would not want to allow multiple client browsers to use this same session ID to access the page. If a different browser is trying to access the page, I would want the client to request for a different session ID.

How do I handle this?


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.