v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-14101465558.4 KB

Signs out a user from all devices. You must sign AdminUserGlobalSignOut requests with Amazon Web Services credentials. It also invalidates all refresh tokens that Amazon Cognito has issued to a user. The user's current access and ID tokens remain valid until they expire. By default, access and ID tokens expire one hour after they're issued. A user can still use a hosted UI cookie to retrieve new tokens for the duration of the cookie validity period of 1 hour.

Calling this action requires developer credentials.

post/#X-Amz-Target=AWSCognitoIdentityProviderService.AdminUserGlobalSignOut

Headers

X-Amz-Target'AWSCognitoIdentityProviderService.AdminUserGlobalSignOut' required

Request body

UserPoolIdstring required

The user pool ID.

Usernamestring password required

The user name.

Response

Success

AdminUserGlobalSignOutResponse required

The global sign-out response, as an administrator.