View Active Users

The Manage Sessions Page displays the current number of sessions and the max session count based on your license.  A table displaying the current active user sessions provides the following information:

• User Id
• Last Access Time
• Login Time
• Does the user have the frevvo.Designer role? (Yes/No)
  
• User's device - (Desktop/Tablet/Phone).
  
• Session Timeout (min) - the session timeout in minutes set up for the tenant.
  

The entries in the table are sorted by last access time in descending order. Columns in the Sessions Table that are sortable display the up and down arrow icon in the column header.  Clicking on the up section of the arrow icon in one column sorts all the columns in the table in the ascending direction. Clicking on the down section of the arrow icon in the column header in one column sorts all the columns in the table in the descending direction.

The table shows a maximum of 200 entries. Twenty-five sessions per page display but you can change that to 10, 50 or 100 by clicking the preferred option in the Show Entries dropdown.

Manage Active User Sessions

The tenant admin can take one of two actions to reduce the number of active users:

• Send an email to a selected user requesting they log out
• Kill a selected user session.

You can only select one user at a time.

When a session in the table is selected, the Kill Session and Request Log Out buttons are enabled.

Send Logout Request

Follow these steps to send a logout request to a user:

1. Click the checkbox to select the user from the Sessions Table.
2. Click the Send Logout Request button.
3. Customizable Email Subject and Message fields display. Both fields are required.
   
   
   
   
4. Click Send. An Email Has Been Sent message displays.
   
   
   
   
5. The user will receive the Logout Request email.
6. When the notified user logs out, the Sessions Table will reflect the change.

1. Cloud Server logs will show INFO level statements about the Log Out Request email.

   2019-02-23 14:46:20.088  INFO 7269a9c4-925f-49f2-bf12-3cfb2e7c79ae mycompany 19792 --- [pool-2-thread-3] com.frevvo.util.HttpClientHolder         [mycompany admin] [7269a9c4-925f-49f2-bf12-3cfb2e7c79ae 8536F313278E020685F2100435675A82] [admin _bDd4YX76EduXFsA4l9RQeQ _D7qUoMiyEei-8vQQDpbnhQ] : Rewrote internal url: frevvo://frevvo/web/tn/mycompany/session/314791E552A3E8543A29BD7F2E4066C0 to: http://localhost:8082/frevvo/web/tn/mycompany/session/314791E552A3E8543A29BD7F2E4066C0
   2019-02-23 14:46:26.602  INFO 01f991f6-f5b4-40ee-9f47-f4f4a8b9a29d mycompany 19792 --- [http-nio-8082-exec-8] com.frevvo.service.MailService           [mycompany admin] [01f991f6-f5b4-40ee-9f47-f4f4a8b9a29d 8536F313278E020685F2100435675A82] [  ] : Email sent to maryann.rapuano@frevvo.com, cc'ed to null bcc'ed to null: Please log out
   2019-02-23 14:46:26.628  INFO 7269a9c4-925f-49f2-bf12-3cfb2e7c79ae mycompany 19792 --- [pool-2-thread-3] com.frevvo.forms.rule.RuleObserver       [mycompany admin] [7269a9c4-925f-49f2-bf12-3cfb2e7c79ae 8536F313278E020685F2100435675A82] [admin _bDd4YX76EduXFsA4l9RQeQ _D7qUoMiyEei-8vQQDpbnhQ] : ** Rule ended [Logout Request.Post to frevvo] (6549 ms)
   

Kill Session

Follow these steps to terminate a user session:

1. Click the checkbox to select the user from the Sessions Table.
2. Click the Kill Session button.
3. Click Ok when prompted to confirm the action.
   
   
   
   
4. The Session Has Been Killed message displays:
   
   
   
   

5. The Sessions table automatically refreshes with the updated information.
   
   
   
   

    Click the Refresh button to manually update the Sessions table.
6. Users performing a workflow Task from their Task List or designers developing forms/flows when their session is killed, will see the error:
   
   
   
   

7. , When the Continue button is clicked, they will immediately be presented with the login screen. Changes to the Task or form/flow will not be saved. They will have to login again and establish a new session.
   
   
   
   

8. The user will receive an email explaining that their session was terminated by the administrator
   
   
   
   

9. Cloud Server logs will show INFO level statements reflecting who killed the session

   Log entry when tenant admin kills the session for user jessica

   2019-02-23 14:23:12.603  INFO 7a6dfa8e-4472-465e-a5f0-8bbd167de381 mycompany 10992 --- [http-nio-8082-exec-2] com.frevvo.users.UserQuota               [mycompany admin] [7a6dfa8e-4472-465e-a5f0-8bbd167de381 659202F79EFA145F02D5E10EB977410C] [  ] : Tenant (mycompany): logout: num users: 1. Server num users: 1
   2019-02-23 14:23:20.116  INFO 7a6dfa8e-4472-465e-a5f0-8bbd167de381 mycompany 10992 --- [http-nio-8082-exec-2] com.frevvo.service.MailService           [mycompany admin] [7a6dfa8e-4472-465e-a5f0-8bbd167de381 659202F79EFA145F02D5E10EB977410C] [  ] : Email sent to maryann.rapuano@frevvo.com, cc'ed to null bcc'ed to null: Session termination
   2019-02-23 14:23:20.116  INFO 7a6dfa8e-4472-465e-a5f0-8bbd167de381 mycompany 10992 --- [http-nio-8082-exec-2] com.frevvo.forms.web.SessionResource     [mycompany admin] [7a6dfa8e-4472-465e-a5f0-8bbd167de381 659202F79EFA145F02D5E10EB977410C] [  ] : Session 85C80AC65C888C0AC85ADA731D5090D2 terminated by administrator

Additional Admin Users

Users added to the tenant as additional administrators will be able to - view/manage active users but their login will be counted against the license and listed in the Sessions Table. Additional admins are not allowed to login once the max user count is reached. Admin users managing user sessions will be prevented from killing their own session if they attempt to do so. The message displayed is shown in the image:

 

 The Superuser/Tenant Admin can kill sessions for additional admin users.

LDAP, SAML or Azure Security Managers

You may notice a slightly different behavior if your tenant is configured for the LDAP, SAML or Azure Security Manager. The tenant admin user setup when your tenant was created or a tenant admin user set up in your IDP will be able to login once the max user count is reached.

For example, a tenant configured for the SAML Security Manager has an initial tenant admin user set up when the tenant was created (backdoor admin) and has a tenant admin user in the Active Directory that SAML is using.

You can log into the tenant after the max user count is exceeded by:

• Browsing this URL - http(s)://<server:port>/frevvo/web/login and logging into the tenant as the backdoor admin OR
• Browsing this URL - http(s)://<server:port>/frevvo/web/tn/<SAML tenant name>/login and logging in as the SAML user tenant admin  .

The tenant admin user will not appear in the Manage User session list or be counted against the license.

Logging in as a user from the Manage User screen

Once the max user limit has been reached message displays, the superuser/tenant admin cannot login as a user from the Manage Users page.

The tenant admin will see this message:

Changes to the Server Configuration screens

The Server Configuration screen, accessible to the superuser admin, shows the following changes:

• Max Concurrent Users has been renamed to Max Concurrent Sessions.
• The Current Session Count across all tenants has been added to the table.

The Tenant Admin will still see Max Concurrent Users on the View Configuration screen.