MCP user session management now available
Each Identity Provider in the Aembit Tenant UI now has a Sessions tab that lists the MCP user sessions of the people who signed in through it. Filter the list, revoke one session, or revoke every session for a user or an MCP client at once. When you delete an Identity Provider that has active sessions, Aembit prompts you to revoke them.
Sessions exist when the Client-to-Gateway Access Policy uses an OIDC ID Token Credential Provider with Enable Refresh Token Support turned on. To get started, see Manage MCP user sessions. For what revoking a session does, see MCP user sessions.