Why don't you create an HttpSessionListener and use that to remove the session from appData.getLoggedInSessions()
You can use the HttpSessionListener to both add and remove.
Also in your example code, by passing true in getSession(true) you are creating a new session.
Thanks for your reply. I wanted to use the seam way to remove the session from the list of logged in sessions.
As a workaround I stored the sessionId as a member variable in the session scoped component right after authentication. It works quite well.