question: public Object createSession ( Map info , HttpServletRequest request , HttpServletResponse response , StringBuffer targetApplication ) throws SessionException { debug . message ( "FedletSessionProvider.createSession(1) called " + info ) ; return info . get ( SessionProvider . PRINCIPAL_NAME ) ; }
target:  Meaningful only for SP side, the implementation of this method will create a local session for the local user identified by the information in the map. The underline mechanism of the session creation and management is application specific. For example, it could be cookie setting or url rewriting, which  is expected to be done by the implementation of this method. Note that only the first input parameter is mandatory. Normally, at least one of the last two parameters should not be null