Initiating a new user session with different (elevated or reduced) permissions will automatically terminate any existing sft session for that user.

• Okta Privileged Access
• Security Policy
• Okta Identity Engine (OIE)

To maintain policy compliance, active sessions are automatically terminated whenever a user’s permissions are elevated or reduced. This occurs when a user is subject to multiple security policies. For example, if a user has an active session with Admin privileges and subsequently initiates a new session with reduced permissions under a different policy, the existing Admin session will be terminated. The same logic applies when transitioning from reduced to elevated privileges.

Please refer to the OPA documentation for specific session management guidelines.

When a user is assigned to multiple policies for a single resource, any active session must be terminated if a new connection requires a different policy context with elevated permissions.