Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
BedrockMission!

Learn more

View all

Sign in to view all badges

SOLVED

Force logout through a workflow

d-wnuk
Level 2
Level 2

Hi,

I'm working on a workflow which disables certain group of users. It's pretty simple and works almost as expected with one exception - I can't manage to force logout users who are currently log in to the console. I used this option in 'Access rights' in operators' section but can't enforce it via workflow. Do you have any thoughts how to perform such action?

Thanks,

Dominik

1 Accepted Solution
Jean-Serge_Biro
Correct answer by
Community Advisor
Community Advisor

Hi Dominik,

Sorry I don't know at all how to achieve the list of all active connection, most of all with ACS which is an On Cloud environment managed directly by Adobe.
The ACS REST API is limited to standard use cases.

As for KillSession that seems not supported by ACS nor ACC On Cloud but only ACC in On Premise mode, I wonder how Adobe would allow such list active session; in ACC there is not such function in JSAPI.


So for ACC On premise only it would need either a workflow activity "nlserver module" with command nlserver pdump -who" pr an Exec Command workflow activity in order to run the nlserver command or the JSAPI below:
execCommand

But nothing similar for ACS, unfortunately for your needs (even though I understand perfectly why Adobe can't allow this for mutualized Cloud hosting)

Regards
J-Serge

View solution in original post

7 Replies
Jean-Serge_Biro
Community Advisor
Community Advisor

Hi Dominik,

Please may you confirm that you are using ACS?

For ACC (v6/v7) with OnPremise hosting only, there is an API function of xtk:session:

KillSession

and this function is the one called in the postSave section of the xtk:operator form.

Unfortunately with ACS or ACC Cloud hosting, it seems that you are not allowed to manage the soap/http session by your own, for security reasons (that I can easily understand).

Regards
J-Serge

d-wnuk
Level 2
Level 2

Hi Jean-Serge,

My mistake, I'm using ACS. Sorry for confusion.

Nevertheless, thanks for pointing KillSession function out, it seems that's the solution I was looking for.

Best regards,

Dominik

d-wnuk
Level 2
Level 2

Jean-Serge,

One more question. I see that I can kill session for all users based on their login but do you know how to query application server for the list of all active connections?

Best regards,

Dominik

Jean-Serge_Biro
Correct answer by
Community Advisor
Community Advisor

Hi Dominik,

Sorry I don't know at all how to achieve the list of all active connection, most of all with ACS which is an On Cloud environment managed directly by Adobe.
The ACS REST API is limited to standard use cases.

As for KillSession that seems not supported by ACS nor ACC On Cloud but only ACC in On Premise mode, I wonder how Adobe would allow such list active session; in ACC there is not such function in JSAPI.


So for ACC On premise only it would need either a workflow activity "nlserver module" with command nlserver pdump -who" pr an Exec Command workflow activity in order to run the nlserver command or the JSAPI below:
execCommand

But nothing similar for ACS, unfortunately for your needs (even though I understand perfectly why Adobe can't allow this for mutualized Cloud hosting)

Regards
J-Serge

View solution in original post

asish_kumarp599
Level 4
Level 4

In ACS, my understanding is if you are able to revoke access rights, the user shouldn't be able to access it next time it reloads the page or access a new feature even if he/she is logged in to ACS instance in the browser before. I am not sure if a force log out is needed here as everyone access the ACS instance in web browser and they don't use client console like ACC. Am I missing something here?

d-wnuk
Level 2
Level 2

@Asish,

by a mistake I created this topic is wrong section. I'm working with ACC, not the standard one.

Jean-Serge Biron​, it's fine - I was just curious if maybe there is such option. I have performed some tests and it seems that KillSession works also on ACC on Cloud but it needs around 5-10 minutes to end user's session.

One more time, many thanks for your support!

pablo_rosero1
Level 10
Level 10

Love to see everyone collaborating!

Moved this to the Adobe Campaign Classic​ community.

All the best,

Pablo