In the VISULOX PORTAL Service a user is an ambiguous object. If the user logs in, he has an unique session. If he logs in again from another client, his session will be transferred. This is the standard VISULOX PORTAL Service behaviour.
If there is a necessity to allow the usage of an account by more than one person, the according setting in the VISULOX PORTAL Service profile has to be marked.
. 
If VISULOX PORTAL Service is connected to an LDAP server, the user who logs in will have the "o=Tarantella System Objects/cn=LDAP Profile" profile.
To make it possible for LDAP users to be group users, a LDAP mirroring profile has to be configured.
Important is to consider How to exclude single datastore users from import.
Group accounts can be used within the policies including MFA Login Policy.