Invalidate all sessions for a user identity

[Pål Axelsson]

Hi,

 

Our IRT team has come up with a question that I can’t find the answer for.

 

Is’t possible to invalidate all active sessions for a specific user
identity?

 

If one of our users account is hijacked for example y social engineering we
want to remove all active sessions for that user identity in a simple and
controlled way. Is that possible?

 

Pål Axelsson

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20090120/3cf131f4/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4941 bytes
Desc: not available
Url : http://tp.its.yale.edu/pipermail/cas/attachments/20090120/3cf131f4/attachment.bin