When an enrollment is revoked, any clients connected via that enrollment should be immediately disconnected

[gkc]

Is your feature request related to a problem? Please describe.

Without this safeguard, a revoked app could remain connected until the network connection is lost or the server is restarted etc

Describe the solution you'd like

When an enrollment is revoked, any clients connected via that enrollment should be immediately disconnected

Describe alternatives you've considered

No response

Additional context

No response

[murali-shris]

@gkc
If a client submits enroll:revoke for self with force flag, should we drop the client connection on the server?

[gkc]

@murali-shris Yes please. Ideally sending a response first so the client knows the revocation was successful and connection will be closed