Manage sessions
See every browser that's signed in to your account, sign out one session or all others, and end another member's sessions through the API.
Every browser that's signed in to your account has a session. A session lasts 12 hours from sign-in; using the console doesn't extend it. You can see your sessions and sign any of them out, for example after you've used a shared computer or lost a device.
Before you begin
- Anyone who can sign in can see and sign out their own sessions.
- To see another member's sessions, you need any role with Read access to Identity & Access. To end them, you need the Owner role, or a custom role with Manage access to Identity & Access.
View your sessions
In the console, go to Identity & AccessAuthentication. Under My account, the Active sessions panel lists every session of your own account, newest first.
Each session shows:
| Field | What it shows |
|---|---|
| First line | The browser's user agent, as the browser sent it. Your current session is marked This session. |
| IP | The IP address the session was signed in from. The platform doesn't look up locations. |
| Signed in | When the session started. |
| Last seen | When the session was last used, updated at most once a minute. |
| Expires | When the session ends by itself, 12 hours after sign-in. |
| Sign-in method | How the session was signed in, for example pwd for a password and totp for a code from an authenticator app. |
Sign out sessions
| To | Do this |
|---|---|
| Sign out another session | Select Revoke on its row, and confirm. |
| Sign out every session except this one | Select Sign out everywhere else, and confirm. |
| Sign out of the session you're using | Select Sign out on the row marked This session, and confirm. The console returns to the sign-in page. |
A signed-out session ends at once: the next request from that browser is refused, and the browser has to sign in again. Signing out a session doesn't change your password or your two-factor authentication. If you think someone else knows your password, change it too.
Changing or resetting your password signs out all your sessions, including the one you're using. Sign in again with the new password. See Change your password.
When a session ends
When your session ends, because it expired, because it was signed out somewhere else, or because your password changed, the console shows Your session has ended. Select Sign in again. After you sign in, the console returns to the page you were on.
End another member's sessions
The console shows only your own sessions. To see and end another member's sessions, use the API:
- GET
/scopes/{scopeId}/iam/users/{userId}/sessionslists a member's sessions. - POST
/scopes/{scopeId}/iam/users/{userId}/actions/revokewith the targetsessionand the session's ID signs out one session. With the targetall_sessions, it signs out all of the member's sessions. You can't use it on a member who ranks above you at any scope.
Ending a member's sessions doesn't lock their account: they can sign in again right away. To keep a member out, deactivate them. See Deactivate, reactivate, or remove a member.
Changing the two-factor authentication requirement doesn't end any session. See Enforce two-factor authentication.