1. What is a multi-point certification defect?
The system allows the same user to perform identity authentication on multiple identical terminals.
For example, different browsers can log in to the same account at the same time.
The same account is used to log in to the system in browser A and browser B. If the accounts logged in by both browsers can operate normally during the same time period, it means that the system has a multi-point authentication defect.
Best Practices
On the premise of not affecting the business, the key business system should prohibit multi-point authentication. When the same account is logged in elsewhere, the login status of the logged-in account should become invalid, and the user's account should be prompted to log in in its area, which may cause the risk of account theft.
Repair plan
Introduce single sign-on