Viewing Session History

The Session History tab gives Account Owners a complete, read-only audit log of every login session across your organization that has either expired or been terminated. It's a powerful tool for security reviews, troubleshooting access issues, and confirming when a specific user signed in or out.

🔐 Who can view this? Session History is intended for organization-level oversight and is most useful for Account Owners and Billing Managers. Standard Users see only their own sessions under the My Sessions tab.


🧭 Getting to Session History

Step 1: Click the Settings ⚙️ icon in the bottom-left corner.

Step 2: You'll land on the Users area by default.

Step 3: From the top tab bar, click Session History.

You'll see a header that reads Session History – All Users, followed by a subtitle showing the total number of terminated and expired sessions on file (for example, "68 terminated and expired sessions from your organization").


🔎 Searching the History

A Search by user name or email… box sits at the top of the list. Type any portion of a user's name or email to instantly narrow the list to that person's historical sessions. This is the fastest way to investigate a single user's recent sign-in activity.


📋 What You'll See in Each Row

Every entry in Session History shows:

  • User & Device — the user's name, email, and a role badge (e.g., Customer ), along with the browser and IP address used for the session
  • Session — a unique session ID (truncated for readability, e.g., b6ad5bd5...0d552422 )
  • Status — one of two states:
    • 🟡 Expired  — the session reached its expiration time naturally
    • 🔴 Terminated  — the session was ended early (by the user, an admin, or a manual logout). Terminated rows also show how long ago the termination occurred.
  • Location — the geographic location associated with the IP address, when available
  • Created — when the session was originally established
  • Expires — when the session ended (or would have ended)

💡 Many environments will display Unknown Browser, Unknown IP, and Unknown location. This simply means the device or network metadata wasn't captured at sign-in time and is not, on its own, a security concern.


🟡 Expired vs. 🔴 Terminated — What's the Difference?

Status What it means
🟡 Expired The session was inactive long enough to hit its automatic expiration window. No one acted on it — the system simply timed it out.
🔴 Terminated The session was ended early. This usually happens when a user (or admin) clicks Logout on a session, or when an Account Owner disables a user account.

Knowing the difference helps you spot intentional sign-outs versus normal session aging.


🔍 Common Things to Look For

Session History is most useful when you want to:

  • Confirm when a user last signed in before a permission change or account update
  • Investigate a security incident — e.g., look for sessions from unfamiliar locations or devices around a specific time
  • Verify a logout after disabling a user, sharing a device, or recovering a lost laptop
  • Audit trial activity to see how frequently a particular team member has been signing in

💡 Best Practices

  • Review periodically. Even a quick monthly scan can surface devices or sign-in patterns you didn't expect.
  • Cross-reference with the Active Sessions tab. If a session appears in Active Sessions you don't recognize, you can sign it out from there, then confirm the termination here in Session History.
  • Pair with the History tab. The general History tab logs user, invitation, and access-request activity, while Session History focuses specifically on sign-in sessions. Use them together for a fuller picture.
  • Use the search box instead of scrolling — the list can be very long for established organizations.
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.