Sessions

Who is signed in now, who was signed in before, and how to end a session, a person's sessions, or everyone's.

Two pages#

Page	Lists	Use it for
Session Manager	What is live right now.	Ending a session.
Session History	Every session, including ended ones.	"Who was signed in on Tuesday?"

The difference catches people out. A session that has ended is not on Session Manager, so that page shows nothing about last week.

What is recorded#

For each session: the browser and operating system, the device, the place and the network operator, and the second factor that was used. What is kept depends on your privacy settings.

Session History can be filtered by person, country, state and device, over a window you choose.

Session History: 74 sessions from 12 people, broken down by browser, operating system, place and sign-in method. — Session History, with addresses stored as their network only.

Read the cap before quoting a summary

The table is paginated, but the summary and the breakdowns are computed over a capped scan of the filtered window, and the page says so when the cap is reached. Narrow the window or add a filter before quoting a percentage.

Ending sessions#

Action	Plan	Effect
End one session	Premium	That browser is signed out. The person's other sessions continue.
Sign one person out	Premium	All of that person's sessions end.
Sign everyone out	Every plan	Every session of your tenant ends. The emergency button.

Ending a session is a revocation, not a ban. Sessions issued before that moment stop being accepted. The person can sign in again straight away, with their password and their second factor.

How fast it takes effect#

Mode	A revoked session is refused
Gateway and connector	Within 5 seconds, at the gateway.
SDK	Within 30 seconds, in your application.

When to use which#

Situation	Action
A user reports a lost laptop	Sign that person out, then have them change their password.
A session appears from a country the person is not in	End that one session, then look at the person on People.
You suspect your own configuration was changed by someone else	Sign everyone out, then read the audit log.

Who can end a session#

Helpdesk and above. See Team and roles.

Something missing or wrong on this page? Tell us and we will fix it.