Use Okta's Universal Logout to manually terminate app sessions. ZeroTek recommends you use this feature as part of a larger strategy that includes configuring Okta session lifetimes and timeouts, with an understanding of the difference between Okta user sessions and app sessions.
ROLE REQUIRED
ZeroTek Administrator
ZeroTek Technician
Apps eligible for Universal Logout include:
Okta native apps, such as the Admin Console, end-user dashboard, workflow sessions, and other Okta platforms.
listed in the Okta Integration Network (OIN)
including Microsoft Office 365 (M365), Slack, and Zoom.
Generic SAML and OIDC apps, as long as they meet Universal Logout requirements, such as Global Token Revocation and Signed JWT support.
Before you can use Universal Logout, you must configure it for the eligible Okta-integrated app. 
Instructions and logout capabilities are app-specific.
Manually invoke Universal Logout
Deep Link to the Okta Admin Console, then go to Directory > People.
Select a user.
Click More Actions, and then select Clear user sessions. The Clear sessions and revoke tokens dialog opens.
Select Clear "keep me signed in", and Logout enabled apps and Okta API tokens to invoke Universal Logout for the user. If you do not select this checkbox, Okta revokes the OpenID Connect and OAuth refresh and access tokens that were issued to the user and clears all active IdP sessions. The user must then authenticate the next time they sign in.
Click Clear and revoke.
NOTE
Some of Okta's documentation about Universal Logout includes instructions and information about policy-driven, automated logouts triggered by risk detection. This capability currently requires Okta's Identity Threat Protection (ITP) SKU. The ability to manually trigger Universal Logout was added to the AMFA SKU in late August 2025. Because ZeroTek's Okta Pro license includes AMFA, we encourage all our Partners to strategically implement Universal Logout, and to contact [email protected] to discuss ITP if automating session termination is a priority for your business.