# Sessions

1. [Home](https://www.agilicus.com/)
2. [Agilicus AnyX Administrative Web Interface](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/)
3. [Organisation](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/)
4. Sessions

![](https://www.agilicus.com/www/587c0760-featured-anyx-admin-organisationsessions.png)## Sessions

[CONTACT](/contact-us/)

The **Session Audits** page (route `/session-audits`) lists the authenticated sessions in your organisation: who is signed in, when the session started, how many times they have logged in, failed multi-factor challenges, and the source IP. From here you can revoke a session that should no longer be active.

![Sessions overview](https://www.agilicus.com/www/05f496b3-sessions-overview.png)    ## Purpose

A session is an authenticated period of access by a user or a token. The Sessions page shows active (and optionally revoked) sessions for the organisation, with the controls to review them and revoke access. It complements the [Authentication audit](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/), which records the sign-in events themselves, and the [Audit subsystem](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/audit-subsystem/), which records changes to objects.

## Why use it

- See who currently has an active session and from which IP address.
- Spot sessions with repeated failed challenges, which can indicate a problem with a user's multi-factor authentication.
- Revoke a session, for example when a device is lost or an employee leaves.
- Jump to a user's authentication audit from a session row.
- Include or exclude service-account sessions, or reveal revoked sessions.

## When to use it

- When responding to a security concern about a specific user or device.
- When a user reports they are locked out or cannot complete multi-factor authentication.
- As part of an access review (who is currently signed in).
- After offboarding, to confirm the person's sessions are terminated.

**Prerequisite**: read permission for sessions. The page shows a *no permissions* message otherwise.

## How to use it

1. Open **Organisation > Sessions** from the left navigation.
2. The table lists sessions, newest first, with the user, created-at time, number of logins, failed challenges, and source IP.
3. Narrow the list with the search and filter controls:

- the **search** box filters the table by text;
- the **filter** menu provides **Email**, **User ID**, **User Type** (User or Service Account), and **Session** (Show Revoked).

1. Use a row's actions menu to **Revoke session** or **View Authentication Audits** for that user.
2. Page through the results with the paginator.

![Row actions](https://www.agilicus.com/www/05f496b3-sessions-row-actions.png)    ### Filters

The **User Type** filter defaults to **User**. Tick **Service Account** to include service-account sessions, and tick **Show Revoked** under **Session** to reveal sessions that have been revoked.

![Filter menu](https://www.agilicus.com/www/284197b3-sessions-filter-menu.png)    ![User type filter](https://www.agilicus.com/www/695e55c9-sessions-user-type-filter.png)    ## Fields and controls reference

| Column | Meaning |
|---|---|
| User | The email address of the signed-in identity |
| Created At | When the session was created |
| Logins | How many logins the session has performed |
| Failed Challenges | How many authentication challenges failed during the session |
| Source IP | The IP address the session is using |
| Actions | Row menu: Revoke session, View Authentication Audits |

### Filters and search

| Control | Purpose |
|---|---|
| Search | Text search over the session data |
| Email | Filter by email domain |
| User ID | Filter by a specific user identifier |
| User Type | Include User and/or Service Account sessions |
| Show Revoked | Reveal sessions that have been revoked |

## Dialogs and popups

There are no configuration dialogs on this screen. The **Revoke session** action applies immediately with a notification. **View Authentication Audits** opens the [Authentication audit](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/) view for the same user.

## Configuration versus diagnostics versus confirmation

- **Configuration**: none. This screen manages sessions rather than configuring them.
- **Diagnostics**: the table, logins, failed challenges, and source IP are read-only diagnostics.
- **Confirmation**: **Revoke session** is an immediate action with no second confirmation. Terminating a session signs the user out of that session; see [How do I terminate a session for a user?](https://www.agilicus.com/how-do-i-terminate-a-session-for-a-user).

## Pagination and async behaviour

- The table pages at 25 rows per page. The paginator shows the page window; use the page numbers to move through the results.
- Session data loads asynchronously and refreshes when you change filters. After revoking a session, wait a few seconds and reload to confirm the session no longer appears (or appears under **Show Revoked**).

## Troubleshooting

- **A user cannot sign in**: check the **Failed Challenges** count for their session and review the [Authentication audit](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/) for the failures. A high failure count with multi-factor challenges usually points to a stale multi-factor token (see [Reset multi-factor token](https://www.agilicus.com/reset-multi-factor-token-code-for-a-user)).
- **I do not see service-account sessions**: tick **Service Account** under **User Type** in the filter menu.
- **A revoked session still appears**: enable **Show Revoked** to see historical sessions; revoked sessions are hidden by default.
- **I cannot find a user's session**: use the **Email** or **User ID** filter and widen the page window with the paginator.

## See also

- [Audit and diagnostics](/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/audit-and-diagnostics/)
- [Authentication audit](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/)
- [Audit subsystem](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/audit-subsystem/)
- [Service accounts](/anyx-guide/agilicus-anyx-administrative-web-interface/access/service-accounts/)
- [Getting started: audit a user](/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/audit-user/)

## Web guide

- [How do I terminate a session for a user?](https://www.agilicus.com/how-do-i-terminate-a-session-for-a-user)
- [Diagnosing user issues with audits](https://www.agilicus.com/diagnosing-user-issues-with-audits)