Browser Sessions
The Browser Sessions page shows all your active and recent login sessions across devices and browsers. Use this page to monitor your account access, detect unauthorized sessions, and manage your security posture.
Viewing Your Sessions
Navigate to Profile > Browser Sessions to view a list of all sessions associated with your account.
Each session entry displays:
| Column | Description |
|---|---|
| Browser | Browser name and version (e.g., Chrome 120, Firefox 121) |
| Operating System | Device OS (e.g., Windows 11, macOS 14, Ubuntu 22.04) |
| IP Address | The IP address used for the session |
| Location | Approximate geographic location based on IP geolocation |
| Last Active | When the session was last used |
| Status | Current (active now) or the last activity timestamp |
Session Details
Click on any session row to view detailed information:
- Device fingerprint — Unique browser characteristics used for risk assessment
- Login time — When the session was first established
- Authentication method — How the user authenticated (e.g., OIDC/PKCE via Entra ID)
- Session duration — How long the session has been active
- Activity correlation — Link to related audit events for this session
Filtering Sessions
Use the date range picker to filter sessions by time period:
- Last 24 hours — See today's login activity
- Last 7 days — Review the past week
- Last 30 days — Monthly session overview
- Custom range — Select specific start and end dates
Cross-Device Monitoring
If you access GrantFlow from multiple devices (e.g., office workstation, laptop, mobile), all sessions appear in a unified list. This helps you:
- Verify you recognize all active sessions
- Identify if your account is being used from unexpected locations
- Detect potential credential compromise early
Security Best Practices
- Review sessions regularly — Check your session list periodically, especially after traveling or using shared devices.
- Watch for unfamiliar locations — If you see sessions from locations you don't recognize, change your password and contact your administrator.
- Monitor concurrent sessions — Multiple simultaneous sessions from different locations may indicate credential sharing or compromise.
- Check after password changes — After changing your password, verify that old sessions are properly terminated.
Session and Audit Correlation
Each browser session is correlated with audit events. When reviewing the Activity Log, session identifiers link back to the Browser Sessions page, making it easy to trace actions to specific devices and login events.
Troubleshooting
| Issue | Solution |
|---|---|
| Session shows wrong location | IP geolocation is approximate — VPN usage may show the VPN server location |
| Old sessions still showing | Sessions expire based on token lifetime configured in Entra ID |
| Missing session entries | Sessions are recorded on authentication — cached tokens may not create new entries |
| Cannot identify a session | Check the device fingerprint details for browser and OS specifics |
See Also
- Device Fingerprinting — How GrantFlow identifies devices
- Activity Log — View all your access activity
- Profile Settings — Manage your account settings