Force O365 Sign Out - Did I miss this?

%3CLINGO-SUB%20id%3D%22lingo-sub-61792%22%20slang%3D%22en-US%22%3EForce%20O365%20Sign%20Out%20-%20Did%20I%20miss%20this%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-61792%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20770px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F13184i657298C6E32B9FD0%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222017-04-12_13-16-29.png%22%20title%3D%222017-04-12_13-16-29.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20don't%20remember%20seeing%20this%20before%20in%20the%20GUI%20under%20the%20OneDrive%20settings%20for%20a%20user.%20I%20did%20some%20further%20digging%20and%20found%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FRemove-a-former-employee-from-Office-365-44d96212-4d90-4027-9aa9-a95eddb367d1%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ethis%20article%3C%2FA%3E%26nbsp%3Bwhich%20outlines%20its%20use%20along%20with%20a%20command%20I%20was%20also%20not%20familiar%20with%3A%20Revoke-AzureADUserAllRefreshToken.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20did%20all%20of%20this%20go%20up%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-61792%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-61897%22%20slang%3D%22en-US%22%3ERe%3A%20Force%20O365%20Sign%20Out%20-%20Did%20I%20miss%20this%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-61897%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20option%20has%20been%20in%20the%20UI%20for%20a%20while%20now%2C%20but%20it%20only%20revokes%20the%20SPO%20token.%20We've%20had%20access%20to%20the%20corresponding%20Revoke-SPOUserSession%20cmdlet%20for%20an%20year%20now.%20The%20Revoke-AzureADUserAllRefreshToken%20is%20a%20new%20addition%20and%20revokes%20access%20across%20all%20workloads.%20It%20went%20up%20end%20of%20last%20year.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

2017-04-12_13-16-29.png

 

I don't remember seeing this before in the GUI under the OneDrive settings for a user. I did some further digging and found this article which outlines its use along with a command I was also not familiar with: Revoke-AzureADUserAllRefreshToken. 

 

 

When did all of this go up? 

1 Reply
Highlighted

The option has been in the UI for a while now, but it only revokes the SPO token. We've had access to the corresponding Revoke-SPOUserSession cmdlet for an year now. The Revoke-AzureADUserAllRefreshToken is a new addition and revokes access across all workloads. It went up end of last year.