1. At a computer system comprising at least one processor, a computer-implemented method for signaling to one or more entities that a login session is to be revoked, the method comprising: an act of receiving an indication that one or more credentials associated with a user account have been changed, the user account having at least one associated login session; an act of determining that a session token associated with the user's login session was issued before the time of credential change indicated on the received indication; and based on the determination, an act of signaling to an identity platform that the user's login session is to be revoked.