<div dir="ltr">Good day:<div><br></div><div>I'm managing a Shibboleth SP deployment and I'm looking for a solution to force a running Shibboleth service provider to expire all sessions. The case I'm concerned about is if we need to quickly disable a user's access. Currently the user will retain access until their session expires, even if they are disabled in the IdP. I'd like to have a way to invalidate all sessions in the SP so that any disabled users will be locked out.</div><div><br></div><div>Is there more graceful option than restarting the shibd process?</div><div><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><span style="font-size:12.8px">--Tom Noonan II</span><br></div></div></div></div></div></div>
</div></div>