Sessions

The Session Audits page (route /session-audits) lists the authenticated sessions in your organisation: who is signed in, when the session started, how many times they have logged in, failed multi-factor challenges, and the source IP. From here you can revoke a session that should no longer be active.

Purpose

A session is an authenticated period of access by a user or a token. The Sessions page shows active (and optionally revoked) sessions for the organisation, with the controls to review them and revoke access. It complements the Authentication audit, which records the sign-in events themselves, and the Audit subsystem, which records changes to objects.

Why use it

See who currently has an active session and from which IP address.
Spot sessions with repeated failed challenges, which can indicate a problem with a user’s multi-factor authentication.
Revoke a session, for example when a device is lost or an employee leaves.
Jump to a user’s authentication audit from a session row.
Include or exclude service-account sessions, or reveal revoked sessions.

When to use it

When responding to a security concern about a specific user or device.
When a user reports they are locked out or cannot complete multi-factor authentication.
As part of an access review (who is currently signed in).
After offboarding, to confirm the person’s sessions are terminated.

Prerequisite: read permission for sessions. The page shows a no permissions message otherwise.

How to use it

Open Organisation > Sessions from the left navigation.
The table lists sessions, newest first, with the user, created-at time, number of logins, failed challenges, and source IP.
Narrow the list with the search and filter controls:

the search box filters the table by text;
the filter menu provides Email, User ID, User Type (User or Service Account), and Session (Show Revoked).

Use a row’s actions menu to Revoke session or View Authentication Audits for that user.
Page through the results with the paginator.

Filters

The User Type filter defaults to User. Tick Service Account to include service-account sessions, and tick Show Revoked under Session to reveal sessions that have been revoked.

Fields and controls reference

Column	Meaning
User	The email address of the signed-in identity
Created At	When the session was created
Logins	How many logins the session has performed
Failed Challenges	How many authentication challenges failed during the session
Source IP	The IP address the session is using
Actions	Row menu: Revoke session, View Authentication Audits

Filters and search

Control	Purpose
Search	Text search over the session data
Email	Filter by email domain
User ID	Filter by a specific user identifier
User Type	Include User and/or Service Account sessions
Show Revoked	Reveal sessions that have been revoked

Dialogs and popups

There are no configuration dialogs on this screen. The Revoke session action applies immediately with a notification. View Authentication Audits opens the Authentication audit view for the same user.

Configuration versus diagnostics versus confirmation

Configuration: none. This screen manages sessions rather than configuring them.
Diagnostics: the table, logins, failed challenges, and source IP are read-only diagnostics.
Confirmation: Revoke session is an immediate action with no second confirmation. Terminating a session signs the user out of that session; see How do I terminate a session for a user?.

Pagination and async behaviour

The table pages at 25 rows per page. The paginator shows the page window; use the page numbers to move through the results.
Session data loads asynchronously and refreshes when you change filters. After revoking a session, wait a few seconds and reload to confirm the session no longer appears (or appears under Show Revoked).

Troubleshooting

A user cannot sign in: check the Failed Challenges count for their session and review the Authentication audit for the failures. A high failure count with multi-factor challenges usually points to a stale multi-factor token (see Reset multi-factor token).
I do not see service-account sessions: tick Service Account under User Type in the filter menu.
A revoked session still appears: enable Show Revoked to see historical sessions; revoked sessions are hidden by default.
I cannot find a user’s session: use the Email or User ID filter and widen the page window with the paginator.