I'm playing with adfs, and I'd like to store credentials in a session context during my questioning of the user. So, my question is, is it safe to store sensitive data in a session context?


  • If you're directly handling credentials (aside from extending the Session Manager) I'd question your approach. Is your session server side or client side? – goodguys_activate May 29 '14 at 13:05
  • basically I perform questioning. using adfs provider. I ask for a pwd and then I would like to store it, so I can use it later. – bear May 29 '14 at 13:12
  • Why do you need to use it later? That is generally a bad thing. – goodguys_activate May 29 '14 at 13:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.