CAS + server-side storage of IdP sessions

[Cantor, Scott]

> But I don't think I knew that this replaced the client-side session storage.
> Does it eliminate the client session cookies on the client?

Some of the cookies, not all of them.

> Also: if I'm reading correctly: for the simple version of this deployment, you
> use the server memory to store all this session info (though you could set up
> an actual storage service). I'm wondering how much potential memory we're
> talking here. Is there a tool that shows you how many sessions are out
> there? Or does anyone have any experience with this?

We have no tools for that at the moment, and I don't use it, so I have no idea.

> If you use disk storage for the sessions, does that affect the response time?

If you mean a database, certainly, probably more because of network overhead. There isn't any other disk mechanism.

-- Scott