Revoking active sessions

If your system is compromised, you can revoke all active sessions and access tokens.

Procedure

  1. Click Sessions in the menu.

  2. From the Actions list, select Sign out all active sessions.

Revocation

Revocation

  1. Specify a time and date where sessions or tokens issued before that time and date are invalid using this console.

    • Click Set to now to set the policy to the current time and date.

    • Click Push to push this revocation policy to any registered OIDC client with the Keycloak OIDC client adapter.