#Session Management

5 min read

Legacy alias: this page is retained for existing links. Use Active Sessions and /settings?section=active-sessions for new customer-facing documentation. For Client Admin, portal links using /settings?section=session-management continue to resolve to Active Sessions and the address bar is rewritten to the canonical active-sessions slug. For Client Manager and Client Staff both the legacy alias and the canonical slug return a not-found state under /settings — that section now lives under Account → Security.

RoleAccess LevelLocation
Client AdminManage own sessionsAccount → Security (/account?section=security); also the deep link /settings?section=active-sessions
Client ManagerManage own sessionsAccount → Security (/account?section=security)
Client StaffManage own sessionsAccount → Security (/account?section=security)

#Overview

The Active Sessions settings section lets you review the portal sessions currently signed in to your account across devices and browsers. You can sign out any non-current session you no longer recognise, or sign out all other devices while keeping the device you are using now signed in.

This section manages only your own sessions. Viewing or ending another user's sessions is not available to any customer role — see Managing Another User's Sessions below.

Note: Partner roles have no session surface at all. The session routes (/api/auth/sessions, /api/auth/sessions/[sessionId]/revoke, and /api/auth/sessions/revoke-others) return a not-found state for partner_admin and partner_user.

#Prerequisites

  • You are signed in to the AiDial portal as a Client Administrator, Client Manager, or Client Staff user. See Signing In for instructions.
  • Open your Account page and select the Security tab (/account?section=security). The Active Sessions panel is shown there for all client roles. Client Admin can also open the panel through the Settings deep link /settings?section=active-sessions; this section is not shown in the visible Client Admin Settings sidebar. For Client Manager and Client Staff the /settings deep link is not available and returns a not-found state — use the Account → Security route.

#Viewing Your Active Sessions

  1. Open the Active Sessions panel from Account → Security (/account?section=security). Client Admin may also use the Settings deep link /settings?section=active-sessions.
  2. Review the sessions returned for your account. The current session is labelled Current session and appears before other sessions.
  3. Each session shows the detected browser/device, the IP address it connected from (or Unknown location when no address is available), a device class, created time, and last active time. When AiDial can only return a raw session, browser, or operating-system identifier instead of a recognisable device description, a generic Portal session label is shown. Sessions that share the same browser, IP address, and recent activity window are grouped together under a single heading.

#Signing Out a Session

#Sign Out One Other Session

  1. Locate the session you want to end in the session list
  2. Select Sign out next to that session
  3. Review the device summary in the confirmation dialogue, then select Sign out. Select Cancel or press Escape to keep the session active.
  4. The target session is marked revoked. That browser is redirected when its session next validates the session state.

The current session does not show a Sign out action in this panel. Use the normal portal sign-out control to end the browser session you are using now.

#Sign Out All Other Devices

  1. Select Sign out all other devices
  2. Confirm the action in the dialogue
  3. All active sessions except your current session are marked revoked

#Managing Another User's Sessions

Managing or revoking another user's portal sessions is not a customer portal feature, and partner roles have no session surface either. It is an AiDial administrator action. If a colleague's account needs to be signed out everywhere, contact your AiDial partner.

You can always sign out your own sessions from this Active Sessions section or with the normal portal sign-out control.

#Security and Scope

The browser uses your signed-in portal session. You do not need to enter or send an API key.

Session listing and sign-out requests are resolved server-side against your own account; the session identifiers you see cannot be used to reach another account. Partner roles receive a not-found state from the session routes. Sign-out requests are rate-limited to 20 per minute for your account — if you reach that limit, wait a moment and try again.

#Multi-Factor Authentication

For information about managing MFA (enabling, disabling, recovery codes), see the Multi-Factor Authentication guide.

For general session security best practices, see Session Security.

#Common Issues

IssueResolution
Cannot find Active SessionsOpen Account → Security (/account?section=security) — the panel lives there for all client roles. It is not shown in the visible Client Admin Settings sidebar (Client Admin can still reach it with the /settings?section=active-sessions deep link), and for Client Manager and Client Staff the /settings deep link returns a not-found state. Partner roles do not have this section.
A session I signed out is still visible brieflyRefresh the panel. Other browsers are redirected after their session next checks its state.
I cannot sign out the current session from the listUse the normal portal sign-out control for the browser you are using now.
I cannot manage another user's sessionsManaging another user's sessions is not a customer portal feature and is not available to partner roles either — it is an AiDial administrator action. Contact your AiDial partner. You can still sign out your own sessions here.
Sign out fails repeatedlySign-out requests are rate-limited to 20 per minute for your account. Wait a moment and try again.
My session ended unexpectedlyYou may have signed it out from another device, an administrator may have revoked it, or the session policy may have expired it. Sign in again.