Managing user sessions
The administrator can view and terminate Yandex Identity Hub sessions of the organization’s federated and local users. The organization roles the administrator needs for that are organization-manager.federations.userAdmin and organization-manager.userpools.userAdmin or higher, respectively.
Warning
The sessions of a user with a Yandex account can be viewed and terminated by this exact user only.
Viewing user sessions
To view the active sessions of a federated or local user of the organization:
-
Log in to Yandex Identity Hub.
-
In the left-hand panel, select Users and select the federated or local user from the list that opens.
To find the right user faster, use the filter at the top of the screen.
-
In the window that opens, go to the Active sessions tab.
The list that opens will contain the following information about the selected user’s sessions:
- User-Agent: Client application ID. Constant value.
- Creation date: Session creation date and time. Constant value.
- Date of use: Date and time the session was last used for authentication in applications that rely on Yandex Identity Hub as an identity provider. The value may change while working with the session.
- End date: Session lifetime after which the user will have to re-authenticate to Yandex Identity Hub. Constant value.
- IP address: IP address of the user’s last access within the active session to services that require authentication via Yandex Identity Hub. The value may change while working with the session.
- ID: Unique session ID. Constant value.
Terminating user sessions
To terminate the active sessions of a federated or local user of the organization:
-
Log in to Yandex Identity Hub.
-
In the left-hand panel, select Users and select the federated or local user from the list that opens.
To find the right user faster, use the filter at the top of the screen.
-
In the window that opens, go to the Active sessions tab.
The list that opens will contain information about the selected user’s sessions.
-
To terminate a specific session:
- In the session row, click and select End.
- In the window that opens, confirm the termination.
As a result, the user will cease to have access to services that use Yandex Identity Hub as an identity provider from the selected device.
-
To terminate all the user's sessions:
- In the top-right corner, click End all sessions.
- In the window that opens, confirm the termination of all sessions.
As a result, the user will cease to have access to services that use Yandex Identity Hub as an identity provider from all devices.
To resume access, the user will have to re-authenticate in Yandex Identity Hub.