https://answers.axonivy.com/questions/3748/how-to-remove-a-unknown-user-session<p>If I logout a user from it's session (session.logoutSessionUser()), the session is still existing with an "unknown user". </p> <pre><code> ISecurityManager secMgr = SecurityManager.getSecurityManager(); for (ISession ssn : secMgr.getSessions()) { if (ssn.getSessionUserName().equalsIgnoreCase("xyz")) { ssn.logoutSessionUser(); } } </code></pre> <p>The session disappears only after a timeout (that might be the timeout defined in the tomcat configuration)</p> <p>However: Is there a way to close/kill a session immediately after logging out a user?</p>enWed, 27 Mar 2019 10:30:55 -0400https://answers.axonivy.com/questions/3748/how-to-remove-a-unknown-user-session/3749<p>Hi Stefan</p> <p>Do you want to destroy the ivy session or the http session? You can destroy the ivy session by using the following API:</p> <pre><code>ssn.getSecurityContext().destroySession(ssn.getIdentifier()); </code></pre> <p>The http session will not be destroyed by this call. However, there is an open issue XIVY-1091 in our issues database for this.</p> <p>Regards</p> <p>Reto Weiss, Axon.ivy Support</p>Reto WeissWed, 27 Mar 2019 10:30:55 -0400https://answers.axonivy.com/questions/3748/how-to-remove-a-unknown-user-session/3749