Session Management

Simply click on "Settings" on the left-hand control panel menu, select the "Account Settings" option and click on the "Session Management" tab.

Overview

The session management page provides users with insights into their active and historical login sessions. This page helps monitor and manage user access by tracking session details such as usernames, session types, IP addresses, countries, and timestamps. Additionally, users can manually log out active sessions to enhance security.

Current Sessions

This section displays all active user sessions. Each session is listed with the following details:

• Username: The name associated with the session.
• Type: The method of session access (e.g., Web User or REST API access).
• IP Address: The IP address from which the session was initiated.
• Country: The geographical location of the user.
• Created Date: The timestamp when the session started.
• Action: Provides a "Log Out" option to manually terminate an active session.

To maintain security, sessions can be logged out manually if an unauthorized access attempt is suspected. The session location should be verified to ensure it is from a trusted source. Monitoring active sessions helps identify any unauthorized access attempts.

Session History

This section provides a historical log of past sessions that have been created and expired. Each entry includes:

• Username: The identifier for the session.
• Type: The type of access used (REST API, Web User, etc.).
• IP Address: The IP associated with the session.
• Country: The geographical location of the user.
• Created Date: The time the session was initiated.
• Expiry Date: The time the session was terminated.

Reviewing past login activity allows for tracking and identifying potential security risks. Unusual login patterns, such as frequent logins from different locations, should be monitored. REST sessions indicate programmatic access, providing insight into API usage.

Best Practices for Session Management

• Regularly review active sessions to ensure no unauthorized access is present.
• Log out sessions that appear suspicious (e.g., unknown locations or unexpected session types).
• Use strong authentication methods, such as multi-factor authentication (MFA), to prevent unauthorized logins.
• Check the session history periodically to identify patterns of login behavior.

By actively managing sessions, account security is strengthened, and unauthorized access can be prevented.