# MCP user session management now available

Each Identity Provider in the Aembit Tenant UI now has a **Sessions** tab that lists the MCP user sessions of the people who signed in through it. Filter the list, revoke one session, or revoke every session for a user or an MCP client at once. When you delete an Identity Provider that has active sessions, Aembit prompts you to revoke them.

Sessions exist when the Client-to-Gateway Access Policy uses an OIDC ID Token Credential Provider with **Enable Refresh Token Support** turned on. To get started, see [Manage MCP user sessions](/user-guide/administration/identity-providers/manage-mcp-user-sessions/). For what revoking a session does, see [MCP user sessions](/user-guide/access-policies/mcp-identity-gateway/mcp-user-sessions/).