@@ -699,6 +699,8 @@ This requirement applies to VPNs where the product handles credentials, VPN clie
1.**REQ-AAC-06 (MI-AUTH-5)-1** The VPN service shall provide a method to force revocation, temporary or permanent, of authorization of an endpoint by an authorized user, and
2.**REQ-AAC-06 (MI-AUTH-5)-2** the revocation of authorization of the VPN client shall end the VPN connection for that client by the time the revocation indicates it has completed.
> NOTE: In scenarios where credential revocation is a globally distributed process, it may be beneficial to inform the user of a successful submitted credential revocation in addition to informing the user once the process has been completed. For use cases where endpoints are already restricted from being connected to each other, this might be a non-blocking background operation that occurs while the user continues their activities.
