I have an app which saves the device token as a cookie on the browser. If first user chooses to remember device then the MFA is getting bypassed on subsequent login, which is all well and good.
But if now a second user logs in on same browser on same machine, they are also getting their MFA bypassed becuase of same device token.
I want this policy to be per user per device. Is it possible to achieve?