Skip to content

Glossary: Identity and Access Management

session

Also written: sessions, session token

The signed-in state an app keeps after you log in, so you don't sign in on every page. A stolen session survives a password change, so after a compromise you must end every session as well as resetting the password.

Where the book teaches it

Related terms

compromised credentialrefresh token