There are many approaches to limit concurrent users. Do you want to restrict access for newly signed users when there is already a user signed in with same credentials, or do you want to sign out a user if a new user signs in with same credentials?
Moreover, you could also limit access to the system according to IP address or a contact (IP address + user agent of a browser) to have just one location one user can sign in from.