Manually force Shibboleth SP to expire/invalidate all sessions

Peter Schober peter.schober at univie.ac.at
Wed Feb 21 12:58:41 EST 2018


* Michael A Grady <mgrady at unicon.net> [2018-02-21 18:53]:
> Not if you did it with an LDAP group membership, and all SPs
> included that authz block.

Provided all SPs you care about are your own and/or can connect to
your DSA (or another centralized repo of some kind). I didn't think
that's a reasonable assumption anywhere these days, but YMMV.

-peter


More information about the users mailing list