Is there any way to prevent users from simply sharing their login information and creating multiple sessions to access paid content?
For example, Company A is selling a service to track products as it moves through various stages of production. It sells this service on a per user basis to Company B. Company B says they only need one account and (sneakily) shares this account with every employee in their customer service department instead of purchasing in agreement to the T&C they’ve agreed to.
Has anyone else faced this situation? What do I do to prevent it? Thanks!
At the moment, there’s no straightforward way to do that. If I have to do this, maybe the only way is associating an email with X lines of device fingerprinting info/IP address.
Every time a user logs in, you check their device fingerprinting/IP address against the list of info you already have from their previous logs in. If they have crossed the allowed number, then you don’t allow them to access content.