Policy Server Guides › Policy Server Administration Guide › Configuring and Managing Encryption Keys › Session Ticket Keys

Session Ticket Keys

When a user successfully logs into a protected resource, the Policy Server creates a session ticket. The session ticket is what the Policy Server uses to determine how long a user's authentication remains valid. This session ticket is encrypted using the session ticket key and cached in the Agent User Cache.

You can choose to have the Policy Server generate the session ticket key using an algorithm, or you can enter a session ticket key in the SiteMinder Key Management dialog box. For security reasons, the randomly generated key is recommended. However, if your SiteMinder implementation includes multiple key stores in a single sign-on environment, you must enter the same session ticket key for all key stores.