# Disable Credential Sharing

By default, Aikido Pentest runs many agents on one login session per test user. Turn on **Disable credential sharing** when that shared session gets signed out, so each test user is used by one agent at a time.

## When to use it

Leave the toggle off when the app allows several sessions for the same user. Sharing one login across agents needs fewer accounts and keeps more agents working at once.

Turn it on when any of these are true:

* A new login signs out every other session for that user.
* The identity provider issues single-use or rotating refresh tokens, and you cannot turn that off. See [OAuth and JWT apps](https://help.aikidogov.us/pentests/configure-a-pentest/setting-up-authenticated-testing#oauth-and-jwt-apps).
* Ordinary actions sign the test user out, such as reloading the page or switching the language.

## Prerequisites

* At least 8 test users on the assessment. The toggle stays hidden until then.
* Several accounts for each role you want tested in parallel. One admin account can only be held by one agent at a time.
* Dedicated test accounts on a staging or QA environment. See [Setting Up Test Users](https://help.aikidogov.us/pentests/configure-a-pentest/setting-up-authenticated-testing).

## How it works

Agents stop sharing logins. Each test user stays with one agent, so add several accounts for every role you want tested at the same time, such as admin and a regular user.

Use the session instructions to name anything that signs a test user out. Agents avoid those actions.

Retests and [Continuous Pentesting](https://help.aikidogov.us/pentests/continuous-pentesting) started from this assessment keep the same setting.

## Turn on Disable credential sharing

{% stepper %}
{% step %}
### Add at least 8 test users

Go to **Pentests**, open the project, and click **Create Assessment**. On **Test Users**, click **Add Test User** and add at least 8 accounts.

Create more than one account per role. An agent that is logged in as admin holds that admin account until it switches or finishes.
{% endstep %}

{% step %}
### Turn on the toggle

Under the test user list, turn on **Disable credential sharing**.
{% endstep %}

{% step %}
### Add session instructions

Fill in **Special instructions for staying logged in as a test user (optional)**.

Describe actions that end the session. For example: reloading the page logs the test user out, and switching the language also signs them out.
{% endstep %}
{% endstepper %}

## Related

{% content-ref url="./" %}
[Setting Up Test Users](https://help.aikidogov.us/pentests/configure-a-pentest/setting-up-authenticated-testing)
{% endcontent-ref %}

{% content-ref url="oauth0-configuration.md" %}
[Auth0 Configuration](https://help.aikidogov.us/pentests/configure-a-pentest/setting-up-authenticated-testing/oauth0-configuration)
{% endcontent-ref %}