It's possible to do it manually in the user management UI but I can't find anything in the user management API to do it programatically.
https://developers.google.com/admin-sdk/directory/v1/reference/users
I found a workaround. You can suspend a user and then immediately restore their account. This has the side effect of invalidating their cookies.