Sign federated users out of devices in Apple Business Manager
You can sign a federated user out of devices they’re currently signed in to.
Sign out devices
In Apple Business Manager
, sign in with a user that has privileges to reset passwords, generate verification codes, and create sign-in information. See Role privileges.Tap Users
in the sidebar, then search for a user in the search field. See How to search.Select the users from the list.
Tap the More button
, select the Sign Out button 
, then tap Sign Out Devices.The users must sign back in with their federated account information.