Possibility to revoke sessions when using client storage

[Cantor, Scott]

Actually in light of the web service comment, I think you probably can already do this pretty simply with 3.4 anyway, by way of resolving an attribute or attributes via REST and then applying a context-check rule to block service access globally based on the result. It's not specific to 3.4 of course, it's just easier since the REST connector is done.

I'll need to check that the right information is accessible but I think information about the session creation time would be accessible so that you could write a check based on a timestamp coming back.

-- Scott