Programming Guides › Programming Guide for C › Agent API › Agent API Services › Session Services › Application Session Information

Application Session Information

Session information can consist of more than the session specification. Session information can include any information that the client application wants to associate with the user's session.

Application-defined session information consists of name/value pairs called session variables. For example, business logic, certificate information, and SAML assertions for affiliate operations can all be stored as session variables and bound to the session ID.

The Agent API provides the following functions for setting, retrieving, and deleting session variables:

• Sm_AgentApi_SetSessionVariables()
• Sm_AgentApi_GetSessionVariables()
• Sm_AgentApi_DelSessionVariables()

Session variables are stored in a server-side database called the session store. The session store is managed by the Policy Server.