HttpServletRequest.changeSessionId() doesn't reassociate session ID with distributed SSO ---------------------------------------------------------------------------------------- Key: WFLY-5657 URL: https://issues.jboss.org/browse/WFLY-5657 Project: WildFly Issue Type: Bug Components: Clustering Affects Versions: 10.0.0.CR4 Reporter: Paul Ferraro Assignee: Paul Ferraro The distributed SSO implementation stores a map of sessions using the session ID. If the user changes the session ID, this reference is never changed. Consequently, subsequent calls to SingleSignOn.getSession(SessionManager) will return null.