Organization sessions (view and revoke)

Under «Operate» › «Sessions» you see your organization's sessions and can end any of them at once, for example when you suspect an account was compromised.

How do I find a session?

1. Open «Operate» › «Sessions» («Organization sessions»).
2. Filter by person (UUID) and, if you like, tick «Active only» (hides expired and revoked ones).
3. Choose «Apply filters».

The table shows «Session», «Method», «Status» and «Created». Yours appears as «This session».

Methods include «Passkey», «Phone approval», «Password», «Password + TOTP», «Recovery», «Federated» and «Service credential».

How do I revoke a session?

1. Choose «Revoke ↗» on the row.
2. Type the session's short ID to confirm.
3. Choose «Revoke this session». «The selected session loses access immediately.» The person's passkey or phone is not removed.

Ending all of a person's sessions

Under «Manage» › «Users» › «Edit», choose «Revoke all sessions». The single sign-on sessions opened from them end too.

Suspected compromised account

1. Revoke all of the person's sessions.
2. If needed, suspend the account or do a reset with the reason «Suspected compromise».
3. Review the person's audit.
4. Treat it as a security incident.

What is not ended

Revoking the session here does not end sessions an application (for example Microsoft 365) already opened on its own.