A session that was ended or revoked is signed out straight away, and the extra sign-in step for two-factor accounts is always checked with the sign-in server.
