Invalidate all Bamboo login sessions

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Summary

For various reasons you may wish to invalidate all current Bamboo user sessions (or session tokens) and force all users to reauthenticate immediately. Simply restarting Bamboo is not enough to achieve this, as users who ticked "Remember me" will be able to re-establish their existing session.

Solution

  1. Remove the records from the REMEMBERME_TOKEN table

    1 DELETE FROM REMEMBERME_TOKEN;
  2. Restart Bamboo

Only after restarting Bamboo will the effect of clearing the REMEMBERME_TOKEN table come into action.

Always back up your data before making any database modifications. If possible, test any alter, insert, update, or delete SQL commands on a staging server first.

Updated on April 2, 2025

Still need help?

The Atlassian Community is here for you.