Manually force Shibboleth SP to expire/invalidate all sessions

Tom Noonan tom at joinroot.com
Tue Feb 20 14:59:34 EST 2018


Good day:

I'm managing a Shibboleth SP deployment and I'm looking for a solution to
force a running Shibboleth service provider to expire all sessions.  The
case I'm concerned about is if we need to quickly disable a user's access.
Currently the user will retain access until their session expires, even if
they are disabled in the IdP.  I'd like to have a way to invalidate all
sessions in the SP so that any disabled users will be locked out.

Is there more graceful option than restarting the shibd process?

--Tom Noonan II
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180220/0baac788/attachment.html>


More information about the users mailing list