GAM signout command not working as expected

[Brady Vardeman]

Good evening, Ross. Apologies for submitting so late.

We have a script we utilize for terminated users that includes the following command:

gam user $TMail signout (where $TMail is the terminated user's email address)

Coupled with the user being deactivated in our SSO solution, the expected behavior is that the user would be logged out of Google Workspace and be unable to sign back in. However, we were informed this evening that a user who had been run through the script was still able to access and send email via his mobile device. Even after running the command manually, it did not appear anything had changed. Have there been any updates to the syntax of that command recently?

Thanks in advance for your help and have a great evening!

[Jay Lee]

See:

https://support.google.com/a/answer/178854?hl=en

Which is the admin console UI equivalent of that gam command. In particular:

"It can take up to an hour to sign the user out of current Gmail HTTP sessions. The time for other apps can vary."

Does that explain what you saw?

p.s. use the audacy app to listen to 94.1 WIP and the Philadelphia Phillies all the time. Good stuff 🙂

Jay

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/a0735e45-738b-49a8-9ea2-d5a52f732878n%40googlegroups.com.

[Brady Vardeman]

Hey, Jay. Thanks for the response!

The admin UI is eventually the route I had to take but we'd like to keep it automated going forward. Unfortunately, there was about a 10-hour gap between the termination and an email sent by that user. It might have been a one-off, but I'm going to continue testing today. Just was wondering if there was something obvious I missed. I had to reauthorize one of our primary GAM instances yesterday, but I can't remember for the life of me if I did that before or after the time the termination occurred.

(Glad to hear you enjoy the app! I do the same for the Yankees. Always strange to hear the name of your company during station identification when you're just trying to listen to a baseball game. Lol)