Session Management

Manage user sessions and force re-authentication across your workspace for enhanced security control.

Overview

Session management allows workspace administrators to control active user sessions within ajan. The primary feature is the ability to invalidate all sessions for other users in the workspace at once, forcing them to re-authenticate.

This capability is essential for maintaining security hygiene and responding quickly to security events that require immediate action across your entire user base.

Log All Users Out

The "Log all users out" feature immediately invalidates sessions for other users in your workspace. When triggered, every other user will be logged out and required to sign in again. The administrator who triggers the action keeps their session so they can continue managing the workspace.

When to Use This Feature

Consider using session invalidation in the following scenarios:

Security Incidents

• Suspected unauthorized access to the workspace
• Compromised user credentials discovered
• Security breach investigation requiring immediate containment
• Unusual login patterns or suspicious activity detected

Policy Changes

• Updated authentication requirements (e.g., enabling SAML SSO)
• New security policies requiring fresh authentication

Personnel Changes

• Employee departures where immediate access revocation is needed
• Organizational restructuring affecting access permissions
• Contract terminations requiring immediate session closure

Routine Security Maintenance

• Periodic session refresh as part of security hygiene
• After security audits that recommend session rotation
• Following password policy updates

What Happens When Triggered

When you log all users out:

1. Immediate invalidation: Sessions for all other users are immediately invalidated
2. All other users logged out: Every user except the administrator who triggers the action is logged out
3. Re-authentication required: Affected users must sign in again using their configured authentication method (password, SSO, etc.)
4. No data loss: User data, conversations, and settings remain intact

How to Log All Users Out

1. Navigate to Security Settings in your workspace
2. Scroll to the bottom of the page
3. Click the Log all users out button
4. In the confirmation dialog, review the warning that users will need to log in again
5. Click Log all users out to confirm

Best Practices

Before Invalidating Sessions

• Communicate with users: When possible, notify users before a planned session invalidation to minimize disruption
• Verify authentication methods: Ensure all users have working authentication methods configured (especially if you recently changed SSO settings)
• Check support availability: For large organizations, consider timing session invalidation when IT support is available to help users who encounter login issues

Security Recommendations

• Combine with other security measures: Use session invalidation alongside IP restrictions and SAML SSO for comprehensive security
• Document incidents: Keep records of when and why session invalidation was triggered for compliance and audit purposes
• Regular rotation: Consider periodic session invalidation as part of your security hygiene routine, especially for sensitive workspaces

Response to Security Incidents

When responding to a security incident:

1. Invalidate sessions first: Immediately log all other users out to contain potential threats
2. Investigate: Review audit logs and identify the scope of the incident
3. Remediate: Address the root cause (e.g., reset compromised passwords, revoke suspicious access)
4. Communicate: Inform affected users about the incident and any actions they need to take
5. Review: After resolution, assess whether additional security measures are needed

Combining with Other Security Features

Session management works best when combined with other ajan security features:

Need Help?

If you encounter any issues with session management or have questions about security best practices, reach out to support@ajan.com for assistance.