> ## Documentation Index
> Fetch the complete documentation index at: https://docs-dev-docs-event-stream-action-templates.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Global Token Revocation

> Revoke session cookies and refresh tokens for a user across all applications via Okta's Universal Logout.

## Endpoint

`POST /oauth/global-token-revocation/connection/{connection_name}`

Use this endpoint with the [Okta Workforce Identity Cloud Universal Logout](https://developer.okta.com/docs/guides/oin-universal-logout-overview/) to log users out of your applications. A request to this endpoint revokes session cookies and refresh tokens, but not access tokens. To learn more, read [Universal Logout](https://auth0.com/docs/authenticate/login/logout/universal-logout). The request must be authenticated before revoking user sessions. Review [Endpoint Authentication](https://developer.okta.com/docs/guides/oin-universal-logout-overview/#endpoint-authentication).

## Path Parameters

<ParamField path="connection_name" type="string" required>
  The name of the connection for which you want to revoke the user's session.
</ParamField>

## Body Parameters

<ParamField body="subject" type="object">
  <Expandable title="properties">
    <ParamField body="format" type="string" required />

    <ParamField body="iss" type="string" required>
      The issuer URL (typically your authorization server's URL).
    </ParamField>

    <ParamField body="sub" type="string" required>
      The subject identifier (typically the user identifier).
    </ParamField>
  </Expandable>
</ParamField>

## Response Messages

| Status | Description                                                                         |
| ------ | ----------------------------------------------------------------------------------- |
| 200    | Successfully revoked session cookies and refresh tokens.                            |
| 400    | Bad request, possibly due to an invalid `subject` format or missing authentication. |
| 401    | Unauthorized, authentication failed.                                                |
| 500    | Internal Server Error.                                                              |