OpenAM console lets the administrator view and manage current
user sessions under the Sessions tab page.
To end a user session manually, select the user's session, and then
click the Invalidate Session button. As a result, the user has to
authenticate again.