invalidating a session for a disabled user (Shibboleth SP)

[Peter Schober]

* Flannery, Sean <sean.flannery at jwt.com> [2014-03-17 16:15]:
> Is there a best standard for invalidating a user's session manually?  I'm
> wondering how easy it is to support a situation where a user has been
> disabled, i.e. removed from LDAP, and has an active SP session that
> we want to immediately invalidate?

There is no SLO support in the IDP, which includes no support for
"administrative logout".
-peter