Apparatus and method for providing revocation of user access in an active session

Abstract

A computing system employs one or more security managers that, in response to an active session user revocation request, such as from a security administrator, to revoke a user during an active session, update an active session access revocation list that includes data representing the user. The security manager revokes active user access to protected system resources for the user based on the updated active session access revocation list, during the active session. The active session user revocation request also causes an update of a user profile in a security manager database that allows the security manager to deny authentication of the user for new sessions. The updated active session access revocation list serves as a type of centralized list with all users that have been fully revoked on the computing system. Related methods and computer products are also described.