Sign an account's session out

DELETE

/admin/users/{id}/sessions/{sid}

Needs the support admin scope, a fresh step-up and a reason of
10–500 characters, in every enforcement mode. Audited at alert; the
account holder is emailed. Staff sessions acting as the account are not
reachable here. Already revoked answers 200 with revoked: false.

Capability: admin:support (area admin), with a fresh step-up. A reason; alert audit; the user is told.

Request

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Signed out

Bodyapplication/json

🟠404

🟠400StaffActionBadRequest

🟠401StaffActionUnauthorized

🟠403StaffActionForbidden

🟠429StepUpTooManyAttempts

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE 'https://api.prod-orm.io/admin/users//sessions/' \
--header 'Content-Type: application/json' \
--data '{
    "reason": "stringstri",
    "stepUp": {
        "totp": "string",
        "password": "pa$$word"
    }
}'

Response Example

200 - Example 1

{
    "session": {
        "id": 0,
        "uuid": "string",
        "userAgent": "string",
        "ip": "string",
        "lastSeenAt": "2019-08-24T14:15:22.123Z",
        "expiresAt": "2019-08-24T14:15:22.123Z",
        "revokedAt": "2019-08-24T14:15:22.123Z",
        "current": true,
        "assumed": {
            "actorId": 0,
            "mode": "read"
        },
        "kind": "browser",
        "binding": "device",
        "device": {
            "id": "string",
            "label": "string"
        },
        "caps": [
            "string"
        ],
        "limits": {},
        "checkInBy": null,
        "stepUpAt": null,
        "label": "string",
        "clientName": "string",
        "subject": {
            "kind": "passwordless",
            "id": null
        },
        "frozen": {
            "at": "2019-08-24T14:15:22.123Z",
            "reason": "string"
        },
        "revokedReason": "string",
        "rotatedFromId": 0,
        "owner": {
            "id": 0,
            "username": "string"
        }
    },
    "revoked": true
}

Modified at 2026-10-05 14:01:12

Everywhere the account is signed in

Begin a single sign-on