This documentation supports the 20.08 version of Remedy Single Sign-On, which is available only to BMC Helix subscribers (SaaS).

To view an earlier version, select the version from the Product version menu.

Invalidating and configuring end user sessions

End user sessions are automatically invalidated when the maximum time set for the session elapses. As a Remedy Single Sign-On administrator, you can set the end user session maximum time, and when required, invalidate the sessions before they elapse.

For example, you might need to invalidate a session if you have previously set a long period of time as the maximum time for the session, and during this time an end user leaves an organization.

If you have applications which act as OAuth clients and interact with Remedy SSO, the end user sessions token might be valid during a long period of time, and you might also need to invalidate sessions.

When you invalidate an end user session on the Remedy SSO server, the user is not immediately logged out from the integrated applications. The user will be asked to log in on opening an application integrated with Remedy SSO in another browser. The time duration when the user continues to be logged in depends on the logout settings of the Remedy SSO agent. 

Related topics

To view session details

Perform the following steps to view the session details:

  1. In the Search field, enter the user or realm ID for which you want to view the session details.
    The system displays the following information:



    User IDUser ID associated with the session.
    RealmRealm ID associated with the session.
    Time RemainingTime remaining for the session.
    Maximum Session TimeTime that was associated for the session.
  2. (Optional) To invalidate/kill a user session, click Delete in the Action column, for the required session.

To invalidate an end user session for AR authentication

  1. On the Session Report page, locate the required session.
  2. Click Delete in the Action column.

To invalidate an end user session for OAuth authentication

  1. On the Server Configuration page, click the Tokens tab.
  2. Locate the required token.
  3. Click Delete in the Action column.
Was this page helpful? Yes No Submitting... Thank you