On 10/8/18, 1:12 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote: > Thanks, Scott. By "every time it's used", you mean any time the SP needs to decrypt the cookie data because it's being > accessed and needs to create/update/read/delete that cookie. Correct? I think so. -- Scott