Session Revocation — Miro
Session Revocation — Miro
Challenge resets all Miro sessions for a user by email using the Miro Enterprise API.
Credentials
Obtain a Miro API access token from your enterprise integration settings (Miro Enterprise plans). Paste it into Challenge as Miro API access token under Integrations → Session Revocation → Miro.
API calls Challenge makes
| Step | Method | Endpoint |
|---|---|---|
| Revoke | POST | https://api.miro.com/v2/sessions/reset_all?email={email} |
Miro does not expose a separate lookup API in this flow; Challenge treats the email as the subject for reset.
Least-privilege guidance
Use an enterprise token limited to user session administration for your organization. See Reset all sessions for a user.
Username format
Use the user’s email address.
Troubleshooting
| Symptom | Check |
|---|---|
user_not_found | Email not in the Miro enterprise |
http_403 | Token lacks enterprise session administration permissions |