You can revoke tokens. For example, you may want to revoke tokens if a user is an unauthorized user of the resource or a user has left your organization.
Note: Identity as a Service automatically revokes all the user’s tokens if a user is a disabled, changes their userid, their password changes.
When tokens are revoked, you will no longer be able to obtain the following:
● Userinfo data when presenting an OIDC access token for it.
● A new OAuth access token when presenting a refresh token for it.
Note: When tokens are revoked, you will no longer be able to obtain Userinfo data when presenting an OIDC access token for it, and you will no longer be able to obtain a new OAuth access token when presenting a refresh token for it. The client application will require the user to re-authenticate and issue a new access token on behalf of the user in this case.
Use the following procedures, as required: