![Zyxware default image3](/sites/default/files/2021-10/Artboard%202%20copy%2014.png)
When a user is successfully authenticated to OpenAM, a session will be generated in the server. Sessions generated in the server are identified by a unique token, named SSOtokenID.
The SSOToken is a C66Encoded string, that points to the session in memory, and the Session Key is a Base64 Encoded string that is used to identify the location of the site and the server where the session is maintained. There is a period delimiter that separates the SSOToken and session key.
As the session key is a Base64 encoded string, we can decode it using any Bas64 decoders.