Skip to content

Manage Active Devices

In Active Devices, you review the devices of all users who are currently logged in and log out devices when needed. You can find login sessions with risk signals first and act on them.


Before you begin

  • Required permission: an administrator with the device management permission
  • Required license: Enterprise or higher

Open Active Devices

  1. Open the administrator page.
  2. Select User Management in the left menu.
  3. Select Active Devices.

Active Devices screen

Review logged-in devices

A summary of the current login sessions appears at the top of the screen.

ItemDescription
Active devicesThe number of devices that are currently logged in.
Needs attentionThe number of devices that have risk signals.
Critical devicesThe number of devices whose risk level is Critical.
Missing signing keyThe number of devices that have no registered installation signing key.

For each device, the list shows the user, the IP, the last activity, the device information, and the risk level. The risk level is one of Normal, Watch, High, and Critical, and the following reasons are shown with it.

  • Blocked IP, Blocked user
  • Recent login failures
  • Missing device ID, Device ID shared by multiple accounts
  • Missing native signing key

Find a device

  • Enter a user, ID, IP, or device in the search box and select Search.
  • In All clients, select one of Web, Mobile, or Desktop.
  • In All risk levels, select a risk level, or select the Needs attention filter to show only devices that have risk signals.
  • Select Reset to clear the search conditions.

Force a device to log out

  1. Select Log out for the device you want to log out.
  2. In Action reason, select one of Administrator action, Lost device, Security policy violation, Suspected compromise, or User request.
  3. When you confirm, the login session of the selected device ends.

Good to Know

  • A forced logout ends only the one login session you selected. The other devices of the same user stay logged in.
  • To log out all users at once, use admin logout-all in Managing the Server with Commands.
  • Actions that end all of a user's sessions, such as a password reset, account deactivation or deletion, or a two-factor authentication reset, also disconnect the AI tools that user connected through the sign-in and consent screen (MCP OAuth connections). MCP connection keys the user created in their settings are kept.