A session ID is usually a randomly generated string to decrease the probability of obtaining a valid one by means of a brute-force search.
A session ID is usually a randomly generated code to minimize the chances of guessing it correctly by trying all possible combinations.