Skip to main content

Sessions

The Sessions tab under Identities is the first thing you see when you open Identities in the admin interface. It lists every sign-in across the deployment, live and finished, so you can see who is connected without opening each identity one at a time.

Active sessions chart

At the top of the page is the Active sessions chart. It counts how many sessions were active in each hour of the last 30 days, with a series for Users, Admins, Agentic and Companion access. A session that spans several hours is counted in every hour it covers, and a series only appears once there is something to plot. The refresh icon above the chart reloads it, and hovering it says how recently the data was pulled. The chart covers 24 hours, 7 days or 30 days, chosen with the toggle above it, and defaults to 30 days. It is not affected by the filters below it.

The Active sessions chart on the Identities Sessions tab, plotting active sessions per hour over 30 days

Finding a session

The toolbar below the chart narrows the list:

  • Three quick toggles: Open now, Admin and Started today. Each narrows the list on its own and they combine.
  • The search box narrows the list by identity.
  • Filters holds three fields: Type (User, Admin, Agentic or Companion), Started and Ended, where Ended also takes Still open.
  • Saved presets cover the common questions: Admin sign-ins today, Open for over a week, and Agentic sessions online.

Sessions table

Each row is one session, not one event. The columns are Login date, Duration, Identity, User agent, Session source, IP address, and Accesses, which counts the knocs that session was granted. A live session shows a green dot beside its elapsed time, and a finished one shows how long it ran.

Clicking the Login date opens that session. Clicking the Identity opens that user or admin.

The sessions filters and table, showing login date, duration, identity, user agent, session source, IP address and accesses

Looking at one session

The session view shows how much of the allowed time has elapsed, the IP address, the browser and operating system behind the user agent, and the authentication method. End Session signs out that one session. Below those, Metadata history records each time the IP address, user agent or device fingerprint changed while the session was open.

To sign out everyone at once, or to end sessions from a script, see Manage user sessions.

Managing identities

The other tabs under Identities are where you manage the identities themselves:

  • Users
  • Admins
  • Groups
  • Agentic & Companion
  • Predefined networks