Manually force Shibboleth SP to expire/invalidate all sessions

Tom Noonan tom at
Tue Feb 20 14:59:34 EST 2018

Good day:

I'm managing a Shibboleth SP deployment and I'm looking for a solution to
force a running Shibboleth service provider to expire all sessions.  The
case I'm concerned about is if we need to quickly disable a user's access.
Currently the user will retain access until their session expires, even if
they are disabled in the IdP.  I'd like to have a way to invalidate all
sessions in the SP so that any disabled users will be locked out.

Is there more graceful option than restarting the shibd process?

--Tom Noonan II
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list