Brian,

There are actuator endpoints for just such a thing, 
https://apereo.github.io/cas/7.2.x/authentication/Configuring-SSO.html#actuator-endpoints

If you have a lot of user sessions, you may run in to performance issues.

Ray
________________________________
From: cas-user@apereo.org <cas-user@apereo.org> on behalf of Brian T. Huntley 
<bhunt...@clarkson.edu>
Sent: July 9, 2025 05:19
To: CAS Community <cas-user@apereo.org>
Subject: [cas-user] Removing ST/TGT's on demand

You don't often get email from bhunt...@clarkson.edu. Learn why this is 
important<https://aka.ms/LearnAboutSenderIdentification>
Good day, all!

We are running CAS 7.1.6 with a Hazelcast backend for ST/TGT storage.  I'm 
looking for a way to be able to remove a specific user's ST's and TGT's on 
demand, such as for an abrupt account termination or discovery of a compromised 
account.  Has anyone here implemented such a thing?

Thanks!
Brian

Brian T. Huntley, CISSP
Director of Network Services and Information Security
Office of Information Technology
Clarkson University
315.268.6723

--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org<mailto:cas-user+unsubscr...@apereo.org>.
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABa%3D6acsVxxrhx7NY7Xq53gRBGY4kVYTQSPiuhS9KfRqVziTJA%40mail.gmail.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABa%3D6acsVxxrhx7NY7Xq53gRBGY4kVYTQSPiuhS9KfRqVziTJA%40mail.gmail.com?utm_medium=email&utm_source=footer>.

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/YQBP288MB00810DE4871A176F62175E7ECE25A%40YQBP288MB0081.CANP288.PROD.OUTLOOK.COM.

Reply via email to