---
title: "DELETE /api/v1/users/{userId}/sessions"
method: DELETE
path: "/api/v1/users/{userId}/sessions"
tags: ["User"]
---

# DELETE /api/v1/users/{userId}/sessions

`DELETE /api/v1/users/{userId}/sessions`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/users/{userId}/sessions`
- Auth: API key in header `Authorization`

Removes all active identity provider sessions. This forces the user to authenticate on the next operation. Optionally revokes OpenID Connect and OAuth refresh and access tokens issued to the user.

## Path parameters

- `userId` string, required

## Query parameters

- `oauthTokens` boolean

## Response `204`

No Content

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)