There are definitely many ways of implementing this. Immediately that comes to my mind is the following:

At the beginning of the login (say from an application) check for the USERNAME from v$session view. If the USERNAME exists, prompt a message and stop the USER. Hope it helps.