We are planning to use Server Side Session and be able to logout user session from other device. Everything was fine until one of our old application which maintain its own session, the application used identity server to login and after the user information recieved its maintain the session itself. So removing server side session wont affected in this old application.

Im thinking of a way to “intercept” the request from Global.asax for each request, and check if the session to the Identity Server already ended, then force the user to logout. But don’t know what is the correct way to do it.

Anyone have experience on this? appreciate any help!