Drafty thoughts on session data structures and storage

[Cantor, Scott]

New page broken off from the original page combining Authentication and
Sessions:

https://wiki.shibboleth.net/confluence/display/IDP30/Sessions

This is a brain dump mostly but contains a proposal I think will work to
map the data and lookup requirements around sessions to the storage API,
in mostly similar fashion to what the SP does now.

The hardest serialization logic involved in that proposal is actually done
already as JSON, the AuthenticationResult part, and the rest is pretty
simple to build except for figuring out how to get it stored in a client
cookie.

-- Scott