Skip to Content
Information
This documentation supports the 25.3 and consecutive patch versions of BMC Helix Single Sign-On. To view an earlier version, select the version from the Product version menu.

 

Configuring settings to instantly terminate all active sessions for maximum security

This use case describes how the BMC Helix Single Sign-On flow enables immediate termination of a user's authenticated session across all integrated BMC Helix applications. When triggered, the session is forcefully ended, and all cached token validations are cleared, ensuring that logout happens immediately. BMC Helix SSO caches only the result of token validation, refreshing it every 3 minutes. This feature enhances security by preventing any delay in logging out of BMC Helix Portal.

Related topics

Key concepts

Getting started

Scenario

BMC Helix Portal user Jack logs in to BMC Helix Portal to navigate through the BMC Helix services to which he subscribed. Jack opens BMC Helix Dashboards to view the status of the new laptop and desktop requests during the financial quarter. He finishes the overview and logs out of BMC Helix Dashboards. With the configured immediate logout, he is logged out of BMC Helix Portal and all BMC Helix services at once.

Workflow

The following table describes the tasks involved in the process of setting the immediate logout of all applications:

TaskProduct componentRoleActionReference
1BMC Helix SSO serverBMC Helix SSO administrator

Configure the BMC Helix SSO server with the Redis server by using the Remedy SSO Admin Console. Set up the redis-uri, redis-password, and redis-channel properties.

Configuring BMC Helix SSO to support immediate logout from all applications
2

BMC Helix SSO agent or Auth Proxy (depending on the Redis service availability)

BMC Helix SSO administrator (for BMC Helix SSO agent) or the internal Ops team (for Auth Proxy)

Ensure that all the Redis properties are the same in the Redis server settings of the Remedy SSO Admin Console, the rsso-agent.properties file of the BMC Helix SSO agent, and the external.conf file of Auth Proxy.

Configuring the BMC Helix SSO agent or Configuring Auth Proxy for deployment with BMC Helix SSO

Results

By using the feature, Jack is able to securely log out of all BMC Helix services in one action after completing his session in BMC Helix Dashboards. This immediate logout ensures that his authenticated session is terminated across the entire BMC Helix Portal, eliminating any residual access or cached token validations. As a result, Jack benefits from enhanced security, while the administrator gains greater control over session management and reduces the risk of unauthorized access.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Helix Single Sign-On 25.3