Hello @2kbqc (2kbqc)​ 

Thanks for bringing your inquiry to our attention 

You can add a rule to the Okta Sign-On Policy, for example, when you need to make sure that only users who are inside your corporate network can access your application, or you need to exclude certain roles in your organization from accessing it. Add a rule for an App Sign-On Policy, for example, to prompt groups that are assigned to your app to re-authenticate after 60 minutes. There is only one App Sign-On Policy, but you can add as many rules to it as you need.

However, once a user access through the SSO it will not limit the amount of sessions, if the user opens more than one Window with the same session it will be allowed since it was authenticated.

More information can be found here:

https://help.okta.com/oie/en-us/Content/Topics/identity-engine/policies/add-okta-sign-on-policy-rule.htm

Let us know if this helps you or if you have any other inquiries. 

Regards,

Daniela Chavarria

Okta Inc.