In ACS, my understanding is if you are able to revoke access rights, the user shouldn't be able to access it next time it reloads the page or access a new feature even if he/she is logged in to ACS instance in the browser before. I am not sure if a force log out is needed here as everyone access the...