Hi,Assuming that the session.invalidate() is not working.FlexContext.getFlexSession() should be returning the session objectfor the new user and not the object of the old user who logged off,more over when another user logs in, shouldn't theuserSession.setAttribute("userid", userid) be overwriting t...