Programming Guides › Programming Guide for Java › Agent API › Single Sign-on › How Information Is Bound to a Session

How Information Is Bound to a Session

Session information can consist of more than the session specification. Session information can include any information that the client application wants to associate with the user’s session.

Application-defined session information consists of name/value pairs called session variables. For example, business logic, certificate information, and SAML assertions for affiliate operations can all be stored as session variables and bound to the session ID.

The class AgentAPI provides the following methods for setting, retrieving, and deleting session variables:

• setSessionVariables()
• getSessionVariables()
• delSessionVariables()

Session variables are stored in a server-side database called the session store. The session store is managed by the Policy Server.