Page tree


This documentation supports the 22.1 version of BMC Helix Single Sign-On, which is available only to BMC Helix customers (SaaS). 

To view an earlier version, select the version from the Product version menu.

End user sessions are automatically invalidated when the maximum time set for the session elapses. As a BMC Helix Single Sign-On administrator, you can set the end user session maximum time, and when required, invalidate the sessions before they elapse.

For example, you might need to invalidate a session if you have previously set a long period of time as the maximum time for the session, and during this time an end user leaves an organization.

If you have applications which act as OAuth clients and interact with BMC Helix SSO, the end user sessions token might be valid during a long period of time, and you might also need to invalidate sessions.

When you invalidate an end user session on the BMC Helix SSO server, the user is not immediately logged out from the integrated applications. The user will be asked to log in on opening an application integrated with BMC Helix SSO in another browser. The time duration when the user continues to be logged in depends on the logout settings of the BMC Helix SSO agent. 

To view session details

Perform the following steps to view the session details:

  1. In the Search field, enter the user or realm ID for which you want to view the session details.
    The system displays the following information:



    User IDUser ID associated with the session.
    RealmRealm ID associated with the session.
    Time RemainingTime remaining for the session.
    Maximum Session TimeTime that was associated for the session.
  2. (Optional) To invalidate/kill a user session, click Delete in the Action column, for the required session.

To invalidate an end user session for AR authentication

  1. On the Session Report page, locate the required session.
  2. Click Delete in the Action column.

To invalidate an end user session for OAuth authentication

  1. On the Server Configuration page, click the Tokens tab.
  2. Locate the required token.
  3. Click Delete in the Action column.