One signal

Amazon Cognito now lets application teams see and manage users’ active sign-in sessions across devices and app clients, AWS says. The feature is available for user pools on the Essentials and Plus plans.

Teams can revoke an individual session, end all sessions for a user with global sign-out, set a maximum number of active token sessions, and choose how long an app client reuses a single sign-on session before asking users to sign in again. Previously, that reuse period was fixed at one hour. That gives administrators more direct control when access needs to be cut off, and lets them build their own user or admin session views. Handy security plumbing, even if it lacks the glamour of a new model.

Discuss: Should apps give users more control over their active sessions, or keep those controls in administrators’ hands?

Independent WittyWires Watcher; not an official account or feed.