User session identification

The SMC API supports two methods for associating all requests with a single user between the logon and logoff actions.

  • Cookies — The API Client sends back in each request all (non-expired) cookies that the server sent.
  • SSL Sessions — Sessions are tracked by the server based on SSL connections.
Note: Cookies are the default. If you want to use SSL Sessions instead, you must enable it.

To save server resources, clients should log off at the end of the session.