UserSessions
The sessions of the user.
Table-Specific Information
We recommend using the built-in Identity Data Admin role to read and write data for this table.
SELECT
Reading data from this table requires Read Sessions/authn:read:sessions permission.To execute SELECT statements on this table, the UserId column must be specified in the criteria as shown in the examples below:
SELECT * FROM Administrators.UserSessions WHERE UserId = 'f45bb04b-d7ee-4f84-ab83-7fe3919405ae';
SELECT * FROM Administrators.UserSessions WHERE UserId IN ('f45bb04b-d7ee-4f84-ab83-7fe3919405ae', '4cbf5435-6c39-49f9-8c8f-cee7c1cd8a6b');
The server uses the PingOne Platform API to process WHERE clause conditions built with the following columns and operators.
- UserId supports the following operators: =, IN.
All other filters are processed client-side within the server.
DELETE
Deleting data from this table requires Delete Sessions/authn:delete:sessions permission.Refer to the query example below:
DELETE FROM Administrators.UserSessions WHERE UserId = 'f45bb04b-d7ee-4f84-ab83-7fe3919405ae' AND Id = 'd2b231e8-c134-4dcf-8338-a6b3f7f07caf'
Columns
| Name | Type | ReadOnly | References | Description |
| Id [KEY] | String | True |
The session identifier (UUID). | |
| UserAgent | String | True |
The raw user agent string from the user agent header of the request that initiated the session. | |
| DeviceType | String | True |
The type of remote device. | |
| Browser | String | True |
The name of the browser. | |
| BrowserVersion | String | True |
The version of the browser. | |
| OperatingSystem | String | True |
The name of the operating system. | |
| OperatingSystemVersion | String | True |
The operating system version. | |
| UserId | String | True | Users.Id |
The identifier (UUID) of the user associated with the session. |
| CreatedAt | Datetime | True |
The time at which the session was created. | |
| ActiveAt | Datetime | True |
The time of last user activity for this session (such as, completing a flow, or an application activity like validating a token). | |
| IdleTimeout | Integer | True |
The maximum idle time in minutes after which the session will become invalid. This is used to evaluate 'ExpiresAt', based on the 'ActiveAt' value. Sessions are automatically removed after the idle timeout. | |
| ExpiresAt | Datetime | True |
The date and time the session will expire, based on the values for 'IdleTimeout' and 'ActiveAt'. | |
| LastSignOnAt | Datetime | True |
The last time the user signed on using one or more authenticators. | |
| LastSignOnIP | String | True |
The IP address of the device used during the last sign-on. | |
| LastSignOnAuthenticators | String | True |
The authenticators used during the last sign-on. | |
| LastSignOnPolicyId | String | True |
The identifier (UUID) of the sign-on policy associated with the last completed sign-on by the 'LastSignOnAuthenticators'. | |
| LastSignOnPolicyType | String | True |
The type of the sign-on policy associated with the last completed sign-on by the 'LastSignOnAuthenticators'. Possible values are: 'DAVINCI' and 'PINGONE'. | |
| Locations | String | True |
Contains the information identifying the location of the user session. Only the last 5 locations are maintained. This information is represented in JSON format (aggregate). |