Skip to content

Sign out my other sessions

See every browser and device where you are signed in, in every tenant, and end the ones you do not recognise: one session, every other session, or every session including this one.

Who can do it

Any person who signs in, for their own sessions. No role or permission is needed. The sessions are listed and ended also when your credentials are managed by your organization's identity provider.

While you act in a tenant under support access, the Security item is absent from the account menu and your sessions are not read.

Before you start

  • Ending a session signs it out at its next request; whoever is using it has to sign in again.
  • End every session, this one included also signs you out here. Use it when you believe someone else knows your password or holds a device you were signed in on.

Steps

  1. Open the account menu in the header and select Security.
  2. Under Where you are signed in, read the list: each row shows the Tenant, when it Signed in, the Method, the Device, its Last activity and when it Ends at the latest. The one you are using is marked This session.
  3. Choose what to end:
    • one session: select End session on its row, then End session in End this session?;
    • every session but this one: select End all other sessions, then End other sessions in End all your other sessions?;
    • every session: select End every session, this one included, then End every session in End every session?.

The row of the session you are using offers no End session: end it with End every session, this one included, or sign out.

What you see when it worked

  • One session: the console says "Session ended." and the row leaves the list.
  • Other sessions: the console says "Your other sessions were ended." and only this session remains.
  • Every session: you are signed out here and the console shows the sign-in screen.

Each ended session is refused by every service from then on, and the revocation is listed under Recent security activity.

If it fails

The confirmation stays open under "The sessions were not ended", with the reason, and nothing ends.

What you see Cause What to do
A refusal saying the session was not found It already ended or expired, or it is not one of yours Close the confirmation and reload the page
A refusal saying this session cannot be identified The access token of this session does not identify the session, so it cannot be told from the others Sign in again, then end the other sessions
"The sessions could not be read" instead of the list The account service did not answer Retry from the message, or come back later

Without the console

Surface How
API DELETE /api/v3/auth/account/sessions/{sessionId} (operation revokeAccountSession); POST /api/v3/auth/account/sessions/revoke-others (operation revokeOtherAccountSessions); POST /api/v3/auth/account/sessions/revoke-all (operation revokeAllAccountSessions)