Disable the account and access will stop right away when he/she clicks on any new object he/she has not already accessed.

Otherwise as stated, a log off is required to obtain a new/modified security token.