Definition

The "Sign Out User" action in the Google Directory category forcibly signs a user out of all active sessions across their devices. This action is useful for enforcing security policies, ensuring compliance, or immediately revoking access when needed. Key capabilities include remotely logging users out, preventing unauthorized access, and managing user sessions efficiently.

Example Use Cases

1. Immediate Account Lockout for Security
   If an employee leaves the company or their credentials are compromised, an admin can use this action to immediately sign them out of all sessions.

2. Forcing Reauthentication After Policy Changes
   When security policies change, such as password updates or 2-step verification enforcement, signing users out ensures they must reauthenticate with the new security measures.

3. Preventing Unauthorized Access
   If suspicious activity is detected on a user's account, an admin can sign them out and require them to log in again with updated credentials.

4. Session Management for IT Support
   If a user reports login issues, IT support can use this action to sign them out remotely and instruct them to log in again, resolving session-related problems.

5. Enforcing Compliance After Role Changes
   If a user transitions to a new role with different access levels, signing them out ensures they reauthenticate with updated permissions.

Inputs

1. Connection

   The authorization connection that allows access to the Google Directory API.

   • Required to authenticate and perform the sign-out action.

2. Id or Email of the User

   The unique identifier for the user to be signed out.

   • Can be provided as:
     • Primary email address (e.g., [email protected]).
     • Alias email address.
     • Unique user ID assigned by Google Directory. You can retrieve this ID from the output of the following actions:
   • Create User
   • Update User
   • Lookup User Information

Example Scenario: Automatically Signing Out a Departing Employee

Situation:
A company follows strict security policies to ensure that former employees cannot access corporate accounts after leaving. When an employee resigns or is terminated, the IT department needs to immediately revoke their access to Google services.

How to Set It Up:

1. The IT administrator identifies the user who needs to be signed out.
2. They use the "Sign Out User" action, entering the employee’s primary email or user ID.
3. The action forces the user to be logged out from all devices, preventing further access to company data.

Outcome:
The employee is instantly signed out from all Google services, ensuring security and compliance with company policies.