Managing Access History & Security
Account Owners and Billing Managers can manage security settings, review login activity, and configure Single Sign-On (SAML/SSO) from the Security section in Settings.
This section provides visibility into active sessions, session history, and authentication configuration for your organization.
π§ Accessing Security Settings
- Click the Settings βοΈ icon (bottom-left corner)
- Select Access History (Security)
π’ Active Sessions (All Users)
The Active Sessions tab displays all currently signed-in users across your organization.
You can view:
- User & device
- Session ID
- Status
- Location
- Last active time
- Expiration time
You may:
- π Logout individual sessions
- π Show or Hide Tokens for session visibility
Logging out a session immediately ends access for that device.

π Session History (All Users)
The Session History tab displays terminated and expired sessions across your organization.
You can review:
- User & device
- Session ID
- Status (Terminated / Expired)
- Location
- Created date
- Expiration date
This provides a full audit trail of access activity.

π€ My Sessions
The My Sessions tab displays:
- Your active sessions
- Your personal session history
You may log out your own active sessions from this page
This helps you manage devices youβve signed into.

π SAML / SSO Configuration
The SAML / SSO tab allows you to configure Single Sign-On for your organization.
Service Provider Details
Use the displayed values when configuring your Identity Provider (IdP):
- Entity ID / Issuer
- ACS URL (Assertion Consumer Service)
- Audience URI
These values are required to establish SAML trust between your Identity Provider and BB AI.
Configure SAML
You can configure SAML by:
-
Uploading your Identity Providerβs metadata XML file
OR
- Pasting the metadata XML directly
Click Save Configuration to activate SAML settings.

π Permissions
Only:
- π Account Owners
- π³ Billing Managers
can access and configure security settings.
Standard Users do not have access to this section.
π‘ Best Practices
- Periodically review active sessions
- Log out unfamiliar devices immediately
- Monitor session history for unusual activity
- Enable SAML/SSO for enterprise-level security
- Limit Account Owner access to trusted administrators