[Yandex Cloud documentation](../../index.md) > [Yandex Identity Hub](../index.md) > Concepts > Sessions

# Sessions

After a user successfully authenticates to Yandex Identity Hub via [auth.yandex.cloud](https://auth.yandex.cloud), a _session_ is created for that user, and a `yc_session` [cookie](../../iam/concepts/authorization/cookie.md) is created for the `auth.yandex.cloud` domain.

Sessions give you access to services that rely on single sign-on (SSO) with Yandex Identity Hub as the identity provider (IdP) without re-authentication in Yandex Identity Hub.

A session contains the following data about the user's working session in Yandex Identity Hub:

* **User-Agent**: Client application [ID](https://en.wikipedia.org/wiki/User_agent). Constant value.
* **Creation date**: Session creation date and time. Constant value.
* **Date of use**: Date and time the session was last used for authentication in applications that rely on Yandex Identity Hub as an identity provider. The value may change while working with the session.
* **End date**: Session [lifetime](sessions.md#session-lifetime) after which the user will have to re-authenticate to Yandex Identity Hub. Constant value.
* **IP address**: IP address of the user’s last access within the active session to services that require authentication via Yandex Identity Hub. The value may change while working with the session.
* **ID**: Unique session ID. Constant value.

## Session lifetime {#session-lifetime}

Session lifetime depends on user account type:

* For [federated](../../iam/concepts/users/accounts.md#saml-federation) users, session lifetime is determined by the [identity federation](add-federation.md) settings.
* For [local](../../iam/concepts/users/accounts.md#local) users, session lifetime is determined by the [user pool](user-pools.md) settings.
* For [Yandex account](../../iam/concepts/users/accounts.md#passport) users, session lifetime is 12 hours.

## User session management {#session-management}

A user can [view](../operations/manage-account.md#view-sessions) and [end](../operations/manage-account.md#end-sessions) their current sessions from the [My account](my-account.md) portal.

An administrator can [view](../operations/manage-sessions.md#view-sessions) and [end](../operations/manage-sessions.md#end-sessions) the sessions of [federated](../../iam/concepts/users/accounts.md#saml-federation) and [local](../../iam/concepts/users/accounts.md#local) users of the organization. The [organization](organization.md) roles the administrator needs for that are [`organization-manager.federations.userAdmin`](../security/index.md#organization-manager-federations-userAdmin) and [`organization-manager.userpools.userAdmin`](../security/index.md#organization-manager-userpools-userAdmin) or higher, respectively.

{% note info %}

The organization's administrator cannot manage the sessions of other organization users [with a Yandex account](../../iam/concepts/users/accounts.md#passport).

{% endnote %}

A session ends and automatically disappears from the user's session list when its lifetime ends or when the user logs out of the account by clicking **Change account** → ![arrow-right-from-square](../../_assets/console-icons/arrow-right-from-square.svg).

#### Useful links {#see-also}

* [Cookie](../../iam/concepts/authorization/cookie.md)
* [Managing user sessions](../operations/manage-sessions.md)
* [Managing an account on the My account portal](../operations/manage-account.md)