There may be two options (I know are in version 11, and I'm assuming are also in version 9) which could help, both around invalidating a user's login ticket, requiring Administrator access:
- You can manually invalidate the login ticket immediately for any user by editing their settings and clicking "Invalidate Login Ticket".
- You can set the external client "Login ticket time-to-live" value from the default 0 (eternal) to invalidate a user's login ticket after X hours. I'm assuming this would also require a user to re-login via the web user interface, but I'm not 100% sure.
