2016-05-27 20:12:07 +00:00
|
|
|
[[_revocation-policy]]
|
|
|
|
|
|
|
|
|
|
=== Revocation Policies
|
|
|
|
|
|
|
|
|
|
If your system is compromised you will want a way to revoke all sessions and access tokens that have been handed out.
|
|
|
|
|
You can do this by going to the `Revocation` tab of the `Sessions` screen.
|
|
|
|
|
|
|
|
|
|
.Revocation
|
2017-08-28 12:50:14 +00:00
|
|
|
image:{project_images}/revocation.png[]
|
2016-05-27 20:12:07 +00:00
|
|
|
|
|
|
|
|
You can only set a time-based revocation policy. The console allows you to specify a time and date where any session
|
|
|
|
|
or token issued before that time and date is invalid. The `Set to now` will set the policy to the current time and date.
|
2017-08-28 12:50:14 +00:00
|
|
|
The `Push` button will push this revocation policy to any registered OIDC client that has the {project_name}
|
2016-05-27 20:12:07 +00:00
|
|
|
OIDC client adapter installed.
|
