# Amazon Cognito adds individual session revocation and configurable sign-on duration

_Published Wednesday, November 11, 2026 at 6:11 PM EST · Security · Latest · Tier 2 — Notable_

AWS says Amazon Cognito now lets application operators list and revoke users' active single sign-on and token sessions across devices and app clients. Operators can also configure how long an app client reuses a single sign-on session before requiring authentication again, replacing the fixed one-hour duration.

Session records include device type, activity time and location, and initial sign-in time. Operators can revoke individual sessions and optionally their linked sessions, or cap active token sessions per user. The controls are available to user pools on Essentials or Plus plans in all AWS Regions where Cognito operates.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/11/amazon-cognito-session-management/)

---
Canonical: https://techandbusiness.org/newswire/6WaLs0Tv1zGSpAk6tmo_9s
Published: 2026-11-11T23:11:25.347Z
Story chronology: 2026-11-11T19:00:00.000Z
Retrieved: 2026-11-12T01:03:17.881Z
Publisher: Tech & Business (techandbusiness.org)