title: what this samlssoTokenId used for can it be used for refresh session and get new SAML certificate?
body: <p>I am  evaluating WSO25.0.0 , require token based access authentication and authorization</p>
  
  <p>Using wso2 5.0.0 Identity Server,  for web  sso with SAML2 , when I send SAML request to wso2 using Idpurl</p>
  
  <p><a href="https://localhost:9443/samlsso" rel="nofollow">https://localhost:9443/samlsso</a></p>
  
  <p>from  browser I found it have samlssoTokenId cookie, with some expire time
  Can this cookie token can be used for getting new SAML certificate,
  which will used further for authentication and authorization.</p>
  
  <p>what this samlssoTokenId cookie used for can it be used for refresh session?</p>
  
  <p>I am giving scenario:</p>
  
  <p>for example  I have two web application ,</p>
  
  <p>user is login from web app1  get samlSSOTokenId from wso2,</p>
  
  <p>In web app code store this cookie token in http authorization header, </p>
  
  <p>when same user request for any resource for web app2 , 
  with samlssoTokenId in authorization header , </p>
  
  <p>web app 2 verify this token from wso2 server get a new SAML cetificate , and</p>
  
  <p>give permission to user for accessing resource.</p>
  
  <p>any suggestion</p>
  
  <p>Thanks</p>