Devices
Enrolled devices, what each sensor reports, and how to revoke a device you no longer trust.
If you don't see this feature in your console, ask your SecureAuth contact to
enable the device_sensor feature flag for your organization.
A sensor that misses an update, or a lost laptop that still holds one, leaves a gap in what you see. Setup › Devices lists every enrolled device, one row per machine, so you can check each sensor and revoke a device you no longer trust.
Check each device
Each row shows the device, its owner, its OS, the sensor release it runs, and when it last synced. The Sensor column shows Update pending, No sync since offer, Update failed, Rolled back, or Reinstall to update when an update needs attention. Hover a status to see the release it refers to and the error the sensor reported. Search by device name, client ID, OS version, or owner, and filter by Owner, Group, or OS.
Shadow AI the sensors find
Each sensor also reports which AI agents run on its device, including the shadow AI that never goes through the gateway. Review them, and what to do about each, in Shadow AI.
Revoke a device
Revoke cuts off a device at once, after you confirm.
The device stays in the list with a Revoked pill, and its owner needs a new installer to enroll it again.
Revoking needs manage_devices, and seeing the screen needs view_devices for all users.
Users see only their own devices on the Devices page of the user portal.
For every column and action, see Devices and the user portal's Devices.