# Sessions

- Link: https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/sessions/
- Published: 2026-08-24T01:47:15+00:00
- Author: Don Bowman

1. [Home](https://www.agilicus.com/)
 2. [Agilicus AnyX Administrative Web Interface](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/)
 3. [Organisation](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/)
 4. Sessions

![587c0760-featured-anyx-admin-organisationsessions](https://www.agilicus.com/www/
587c0760-featured-anyx-admin-organisationsessions.png)

## Sessions

[CONTACT](https://www.agilicus.com/contact-us/)

The **Session Audits** page (route `/session-audits`) lists the authenticated sessions
in your organisation: who is signed in, when the session started, how many times
they have logged in, failed multi-factor challenges, and the source IP. From here
you can revoke a session that should no longer be active.

![Sessions overview](https://www.agilicus.com/www/05f496b3-sessions-overview.png)

## Purpose

A session is an authenticated period of access by a user or a token. The Sessions
page shows active (and optionally revoked) sessions for the organisation, with the
controls to review them and revoke access. It complements the [Authentication audit](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/),
which records the sign-in events themselves, and the [Audit subsystem](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/audit-subsystem/),
which records changes to objects.

## Why use it

 * See who currently has an active session and from which IP address.
 * Spot sessions with repeated failed challenges, which can indicate a problem with
   a user’s multi-factor authentication.
 * Revoke a session, for example when a device is lost or an employee leaves.
 * Jump to a user’s authentication audit from a session row.
 * Include or exclude service-account sessions, or reveal revoked sessions.

## When to use it

 * When responding to a security concern about a specific user or device.
 * When a user reports they are locked out or cannot complete multi-factor authentication.
 * As part of an access review (who is currently signed in).
 * After offboarding, to confirm the person’s sessions are terminated.

**Prerequisite**: read permission for sessions. The page shows a _no permissions_
message otherwise.

## How to use it

 1. Open **Organisation > Sessions** from the left navigation.
 2. The table lists sessions, newest first, with the user, created-at time, number 
    of logins, failed challenges, and source IP.
 3. Narrow the list with the search and filter controls:

 * the **search** box filters the table by text;
 * the **filter** menu provides **Email**, **User ID**, **User Type** (User or Service
   Account), and **Session** (Show Revoked).

 1. Use a row’s actions menu to **Revoke session** or **View Authentication Audits**
    for that user.
 2. Page through the results with the paginator.

![Row actions](https://www.agilicus.com/www/05f496b3-sessions-row-actions.png)

### Filters

The **User Type** filter defaults to **User**. Tick **Service Account** to include
service-account sessions, and tick **Show Revoked** under **Session** to reveal 
sessions that have been revoked.

![Filter menu](https://www.agilicus.com/www/284197b3-sessions-filter-menu.png)

![User type filter](https://www.agilicus.com/www/695e55c9-sessions-user-type-filter.
png)

## Fields and controls reference

| Column | Meaning | 
| User | The email address of the signed-in identity | 
| Created At | When the session was created | 
| Logins | How many logins the session has performed | 
| Failed Challenges | How many authentication challenges failed during the session | 
| Source IP | The IP address the session is using | 
| Actions | Row menu: Revoke session, View Authentication Audits |

### Filters and search

| Control | Purpose | 
| Search | Text search over the session data | 
| Email | Filter by email domain | 
| User ID | Filter by a specific user identifier | 
| User Type | Include User and/or Service Account sessions | 
| Show Revoked | Reveal sessions that have been revoked |

## Dialogs and popups

There are no configuration dialogs on this screen. The **Revoke session** action
applies immediately with a notification. **View Authentication Audits** opens the
[Authentication audit](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/)
view for the same user.

## Configuration versus diagnostics versus confirmation

 * **Configuration**: none. This screen manages sessions rather than configuring
   them.
 * **Diagnostics**: the table, logins, failed challenges, and source IP are read-
   only diagnostics.
 * **Confirmation**: **Revoke session** is an immediate action with no second confirmation.
   Terminating a session signs the user out of that session; see [How do I terminate a session for a user?](https://www.agilicus.com/how-do-i-terminate-a-session-for-a-user).

## Pagination and async behaviour

 * The table pages at 25 rows per page. The paginator shows the page window; use
   the page numbers to move through the results.
 * Session data loads asynchronously and refreshes when you change filters. After
   revoking a session, wait a few seconds and reload to confirm the session no longer
   appears (or appears under **Show Revoked**).

## Troubleshooting

 * **A user cannot sign in**: check the **Failed Challenges** count for their session
   and review the [Authentication audit](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/)
   for the failures. A high failure count with multi-factor challenges usually points
   to a stale multi-factor token (see [Reset multi-factor token](https://www.agilicus.com/reset-multi-factor-token-code-for-a-user)).
 * **I do not see service-account sessions**: tick **Service Account** under **User
   Type** in the filter menu.
 * **A revoked session still appears**: enable **Show Revoked** to see historical
   sessions; revoked sessions are hidden by default.
 * **I cannot find a user’s session**: use the **Email** or **User ID** filter and
   widen the page window with the paginator.

## See also

 * [Audit and diagnostics](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/audit-and-diagnostics/)
 * [Authentication audit](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/)
 * [Audit subsystem](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/audit-subsystem/)
 * [Service accounts](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/access/service-accounts/)
 * [Getting started: audit a user](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/audit-user/)

## Web guide

 * [How do I terminate a session for a user?](https://www.agilicus.com/how-do-i-terminate-a-session-for-a-user)
 * [Diagnosing user issues with audits](https://www.agilicus.com/diagnosing-user-issues-with-audits)
