Manually force Shibboleth SP to expire/invalidate all sessions

[Cantor, Scott]

> Is there more graceful option than restarting the shibd process?

There's no administrative logout mechanism, and building one would depend on the SAML NameID received, rather than anything one probably would expect to be able to use from outside the running system. But it could potentially be built provided that were known.

-- Scott