Parallel sessions using the same access tokenshttps://sugarclub.sugarcrm.com/dev-club/f/questions-answers/2018/parallel-sessions-using-the-same-access-tokensHi We have an integration which allows us to call the SugarCRM API by using the authentication tokens of a certain SugarCRM user. Now, our customers have a problem: their refresh token become invalid (invalid_grant) and we cannot find any way to reproducingen-USTelligent Community 12RE: Parallel sessions using the same access tokenshttps://sugarclub.sugarcrm.com/thread/7423?ContentTypeID=1Mon, 17 Feb 2020 13:42:51 GMT5c521d64-519d-47a6-9065-134618b211bf:12bb9a88-b50a-411e-b66a-19ccd468711fJan Aelbrecht<p>Ok, that means the problem lies somewhere else. Thank you for the response.</p><div style="clear:both;"></div>RE: Parallel sessions using the same access tokenshttps://sugarclub.sugarcrm.com/thread/7422?ContentTypeID=1Fri, 14 Feb 2020 15:32:10 GMT5c521d64-519d-47a6-9065-134618b211bf:9cd7d2da-0e82-4303-8134-24379b07d4c7Matt Marum<p>If inbound requests are coming from multiple IP addresses with the same Access Token then the session (including, I believe, the refresh token) would get invalidated. We have a system setting called &quot;Validate user IP address&quot; that you may need to turn off. It is on by default. We&#39;re increasingly seeing issues like this with integrations because&nbsp;everybody&#39;s software is moving to architectures that makes this scenario more likely.</p><p><a href="https://support.sugarcrm.com/Knowledge_Base/Troubleshooting/Troubleshooting_Sugar_Logging_Out_Unexpectedly/#Client_IP_Change" rel="nofollow" target="_blank">https://support.sugarcrm.com/Knowledge_Base/Troubleshooting/Troubleshooting_Sugar_Logging_Out_Unexpectedly/#Client_IP_Ch&hellip;</a>&nbsp;</p><p>I&#39;m hoping to get this setting turned off by default in the future.</p><div style="clear:both;"></div>