
When a user is successfully authenticated to OpenAM, a session will be generated in the server. Sessions generated in the server are identified by a unique token, named SSOtokenID.
The SSOToken is a C66Encoded string, that points to the session in memory, and the Session Key is a Base64 Encoded string that is used to identify the location of the site and the server where the session is maintained. There is a period delimiter that separates the SSOToken and session key.
As the session key is a Base64 encoded string, we can decode it using any Bas64 decoders.