Brian, There are actuator endpoints for just such a thing, https://apereo.github.io/cas/7.2.x/authentication/Configuring-SSO.html#actuator-endpoints
If you have a lot of user sessions, you may run in to performance issues. Ray ________________________________ From: cas-user@apereo.org <cas-user@apereo.org> on behalf of Brian T. Huntley <bhunt...@clarkson.edu> Sent: July 9, 2025 05:19 To: CAS Community <cas-user@apereo.org> Subject: [cas-user] Removing ST/TGT's on demand You don't often get email from bhunt...@clarkson.edu. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> Good day, all! We are running CAS 7.1.6 with a Hazelcast backend for ST/TGT storage. I'm looking for a way to be able to remove a specific user's ST's and TGT's on demand, such as for an abrupt account termination or discovery of a compromised account. Has anyone here implemented such a thing? Thanks! Brian Brian T. Huntley, CISSP Director of Network Services and Information Security Office of Information Technology Clarkson University 315.268.6723 -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org<mailto:cas-user+unsubscr...@apereo.org>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABa%3D6acsVxxrhx7NY7Xq53gRBGY4kVYTQSPiuhS9KfRqVziTJA%40mail.gmail.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABa%3D6acsVxxrhx7NY7Xq53gRBGY4kVYTQSPiuhS9KfRqVziTJA%40mail.gmail.com?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/YQBP288MB00810DE4871A176F62175E7ECE25A%40YQBP288MB0081.CANP288.PROD.OUTLOOK.COM.