diff --git a/Backend/services/core/src/main/java/org/edu_sharing/repository/server/authentication/ShibbolethServlet.java b/Backend/services/core/src/main/java/org/edu_sharing/repository/server/authentication/ShibbolethServlet.java
index 7085c7e24..492c795f9 100644
--- a/Backend/services/core/src/main/java/org/edu_sharing/repository/server/authentication/ShibbolethServlet.java
+++ b/Backend/services/core/src/main/java/org/edu_sharing/repository/server/authentication/ShibbolethServlet.java
@@ -45,6 +45,8 @@
 import org.edu_sharing.service.authentication.EduAuthentication;
 import org.edu_sharing.service.authentication.SSOAuthorityMapper;
 import org.edu_sharing.service.authority.AuthorityServiceFactory;
+import org.edu_sharing.service.toolpermission.ToolPermissionService;
+import org.edu_sharing.service.toolpermission.ToolPermissionServiceFactory;
 import org.springframework.beans.factory.NoSuchBeanDefinitionException;
 import org.springframework.context.ApplicationContext;
 import org.springframework.extensions.surf.util.URLDecoder;
@@ -139,7 +141,7 @@ protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws Se
 		}
 
 		try {
-
+			Objects.requireNonNull(ToolPermissionServiceFactory.getInstance()).invalidateSessionCache();
 			logger.info("no valid authinfo found in session. doing the repository shib auth");
 
 			logger.info("req.getCharacterEncoding():"+req.getCharacterEncoding());