Agent WranglersSessions and security activity
Show people where they are signed in, let them sign out anywhere, end sessions when access changes, and show each person their own security log.
- Required 2
- Recommended 3
Required
Let people sign out of one device or all of them
RequiredLet people end any one session from the list, or every session but the current one. The ended sessions stop working on their next request.
End sessions when access changes
RequiredEnd every other session when the password changes or a factor is removed. End every session when the account is disabled, deleted or locked after a "This wasn't me" report.
Recommended
List every signed-in device
RecommendedShow each person their active sessions, with device, browser, approximate place, sign-in time and last activity, and mark the current one.
List connected apps and personal tokens
RecommendedShow each person every app, agent and personal token that acts for them, with its scopes and last use. Let them revoke each one.
Show people their own security log
RecommendedKeep a log of each person's security events and show it to them in settings for at least 90 days.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/sessions-and-security-activity.