web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Small and medium business | Business Central, N...
Suggested answer

How to force sign-out a user from Business Central instead of just cancelling the session?

(3) ShareShare
ReportReport
Posted on by 18

In the Business Central Admin Center, under Environments → Manage Sessions, there is an option to Cancel Session.

When we cancel a session, the user side shows this message

 

"Dynamics 365 Business Central

We paused while you were away. Please refresh to continue."

(Refresh button appears)

However, this only pauses the session — the user can simply refresh and continue working.

 

Our client’s requirement is to forcefully sign out a user (so they must log in again), not just pause the session.

Is there any way to achieve this, either through Admin Center, API, or custom AL code?

If not, is this limitation by design or are there any planned enhancements around session management or forced logout in Business Central?

I have the same question (0)
  • Suggested answer
    Nimsara Jayathilaka. Profile Picture
    4,814 on at
    How to force sign-out a user from Business Central instead of just cancelling the session?
    Hi
     
    In Business Central, Cancel Session only pauses the user session — it doesn’t force sign-out. There’s no built-in way (Admin Center, API, or AL) to make users re-authenticate.
    This is by design, as session control depends on Azure AD tokens.
    To fully sign out users, use the Microsoft 365 Admin CenterSign out from all sessions for that user.
    No upcoming feature or AL workaround currently enables forced logout within BC itself.
     
     
    Thanks
    Nimsara
  • Suggested answer
    OussamaSabbouh Profile Picture
    1,070 on at
    How to force sign-out a user from Business Central instead of just cancelling the session?
    Hello,
    Canceling a session in Business Central only pauses it, users can refresh and continue.
     
    To sign users out, use Microsoft 365 Admin Center then Sign out of all sessions
     
    Regards, 
    Oussama
  • Suggested answer
    Aman Kakkar Profile Picture
    964 on at
    How to force sign-out a user from Business Central instead of just cancelling the session?
    Hi,
     
    As far as I know, there isn’t a direct way to force a sign-out specifically for Business Central.

    You can either configure browser settings in all of the user's systems to clear cookies/cache after a certain time to remove session tokens, or temporarily revoke the user’s Permissions in Business Central if you want to stop their activity.
     
    You can use the “Sign out all sessions” from the Microsoft 365 Admin Center, as described in this article: How to Revoke Microsoft Office 365 Access in Bulk and Save Hours of Time! - Ytria
     
    Although this is supposed to sign users out of all Microsoft 365 applications, it didn’t actually sign the user out of Business Central in my experience. You can give it a try.
     

    Hope this helps,
    Aman K

  • Suggested answer
    Gregory Mavrogeorgis Profile Picture
    430 on at
    How to force sign-out a user from Business Central instead of just cancelling the session?
    Hi,
    Cancel Session in BC doesn’t sign people out. It just kills that one server session. If the user hits Refresh, they’re right back in. That’s how it’s designed.If you need a real sign-out (they must log in again), do it at the Microsoft Entra (Azure AD) layer:
    Option A: Revoke their sessions (one user)
    1. Microsoft Entra admin center → Users → pick the user
    2. Revoke sign-in sessions (sometimes labeled “Sign out of all sessions”)
      → Their refresh tokens are invalidated. On next refresh/token renewal, BC will ask them to sign in.
    Option B: Do it by script
    # Requires Microsoft.Graph module and appropriate permissions
    Revoke-MgUserSignInSession -UserId user@domain.com
    Option C: Make re-auth happen regularly (org-wide or scoped)
    • Conditional Access policy for Dynamics 365 Business Central:
      • Set Sign-in frequency (e.g., 1 hour) so users must re-enter credentials periodically.
      • Consider Disable persistent browser session to avoid long-lived sign-ins.
    • This won’t kick them out immediately, but it prevents “stay signed in forever.”
    What won’t do a true sign-out
    • Admin Center → Cancel session (what you tried)
    • Any Business Central API/AL trick—there’s no “log this user out now” endpoint
    • Restarting the environment just drops sessions; it still isn’t a sign-out
    Bottom line: Forcing a logout is handled by Entra, not Business Central. There’s no BC-native “force sign out” today, and nothing public that says it’s coming. If you want, tell me which path (A, B, or C) you’re going with and I’ll give you a quick checklist tailored to your tenant setup.
     
    If you find this helpful please mark it as verified

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
Rishabh Kanaskar Profile Picture

Rishabh Kanaskar 2,762

#2
Sumit Singh Profile Picture

Sumit Singh 2,573

#3
YUN ZHU Profile Picture

YUN ZHU 1,930 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans