Question

I want to track a user’s logon session from the time they login to my site, to the time they logoff.

Is there a pre-existing cookie I should use, or variable? I thought of using ASP.NET sessionIDs but read on StackOverflow that these numbers may change.

I would save my own Session cookie, but I don’t want to do something that could be done more efficiently another way. I’m using Windows Identity Foundation (WIF) to handle my authentication layer.

The only cookie I see in fiddler is a FedAuth cookie so I assume that I might be able to derive some valuable information from it, but I don’t know where / how in the WIF framework to gain access to such information.

Answer 1

WIF gives a bunch of events you can subscribe to. See these:

http://msdn.microsoft.com/en-us/library/microsoft.identitymodel.web.wsfederationauthenticationmodule_members.aspx

http://msdn.microsoft.com/en-us/library/microsoft.identitymodel.web.sessionauthenticationmodule_members.aspx