Dave, There are some actuators that can remove sessions [1], they probably existed in 6.5. Not sure if it is automated with locking.
Ray [1]https://apereo.github.io/cas/7.2.x/authentication/Configuring-SSO.html#actuator-endpoints ________________________________ From: [email protected] <[email protected]> on behalf of Dave Steiner <[email protected]> Sent: September 18, 2025 14:18 To: CAS Community <[email protected]> Subject: [cas-user] Terminate session on netid lock You don't often get email from [email protected]. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification> We lock users (e.g in LDAP/Kerberos) for various reasons but their TGT stays active. Is there any way (in 6.5.x) to have the locking process destroy their TGT? thanks, ds -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/9c59c962-24c7-4e02-bb12-33945e796aa5n%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/9c59c962-24c7-4e02-bb12-33945e796aa5n%40apereo.org?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/YQBP288MB008123102023D237C9B207C5CE11A%40YQBP288MB0081.CANP288.PROD.OUTLOOK.COM.
