I am using oAuth 2.0 Web server flow to connect to Salesforce org and get the Access token and refresh token. I use the following URL to access a visualforce page that resides within the Salesforce org:
I am able to sign in using this URL and this session ID across multiple browsers (same network and different network). My page contains sensitive client information and I would not want to allow multiple client browsers to use this same session ID to access the page. If a different browser is trying to access the page, I would want the client to request for a different session ID.
How do I handle this?