2.1 Session Cookies

Restrict Session Cookie To A Particular Domain And Path

Read more about Restrict Session Cookie To A Particular Domain And Path

Use HttpOnly on Session Cookie

Read more about Use HttpOnly on Session Cookie

Don't Disclose Session IDs

Read more about Don't Disclose Session IDs

Disable URL Rewriting

Read more about Disable URL Rewriting

Timeout (Inactivity and Absolute)

Read more about Timeout (Inactivity and Absolute)

Provide A Logout Function On Every Page

Read more about Provide A Logout Function On Every Page

Support Single Sign Off

Read more about Support Single Sign Off

Support Single (Reduced) Sign On

Read more about Support Single (Reduced) Sign On

Avoid Issuing Session Cookies Prior to Login

Read more about Avoid Issuing Session Cookies Prior to Login

Issue New Session ID On Login/Re-authentication

Read more about Issue New Session ID On Login/Re-authentication

Subscribe to 2.1 Session Cookies