Sessions
Sessions in the organization Console are SSO launches: a member opened an assigned OIDC or SAML application with their LoginSign session. This list is not the LoginSign browser session and not the workplace cookie length.
What is stored
- Application name and protocol (OIDC or SAML)
- Member name and email
- Start time, expiry, and client IP when known
A successful OIDC authorize or SAML assertion writes one row. Internal HTML packages do not create SSO sessions. Console shows the latest rows for the organization. Members can read only their own rows on the consume API.
Applications, assignments, and sessions are Enterprise-only. Other plans hide the menu and reject the APIs with 403 PLAN_REQUIRED.
Owner API
GET /api/developer/teamspaces/:id/sso/sessions
Member API
GET /api/org/:slug/sso/sessions
Requires an organization member session. Returns that member's launches only.