Session Revocation — Dropbox Business
Challenge revokes active device sessions (web, desktop, and/or mobile) for a Dropbox Business team member.
Credentials
- Create a Dropbox Business app with team scopes.
- Required scopes:
members.read, sessions.list, sessions.modify
- Generate a team access token and paste it into Challenge under Integrations → Session Revocation → Dropbox Business.
Optional settings
| Setting | Default | Effect |
|---|
| Revoke web sessions | On | Ends browser sessions |
| Revoke desktop clients | On | Unlinks desktop devices |
| Revoke mobile clients | On | Unlinks mobile devices |
API calls Challenge makes
| Step | Endpoint |
|---|
| Lookup | POST /2/team/members/get_info (by email) |
| List devices | POST /2/team/devices/list_member_devices |
| Revoke | POST /2/team/devices/revoke_device_session_batch |
Use the member’s primary email address.
Troubleshooting
| Symptom | Check |
|---|
member_not_found | Email not a team member |
| Partial revoke failure | Some devices already revoked; check result metadata |
http_401 | Invalid or expired team token |
