---
title: SessionInfoContext
description: Provides AM session information and properties. When the SessionInfoFilter processes a request, it injects info and properties from the AM session into this context.
component: pinggateway
version: 2026
page_id: pinggateway:reference:SessionInfoContext
canonical_url: https://docs.pingidentity.com/pinggateway/2026/reference/SessionInfoContext.html
revdate: 2025-06-02T18:01:47Z
section_ids:
  SessionInfoContext-properties: Properties
  SessionInfoContext-moreinfo: More information
---

# SessionInfoContext

Provides AM session information and properties. When the [SessionInfoFilter](SessionInfoFilter.html) processes a request, it injects info and properties from the AM session into this context.

## Properties

The context is named `amSession`, and is accessible at `${contexts.amSession}`. The context has the following properties:

* `"asJsonValue()"`: *[json.JsonValue](../_attachments/apidocs/org/forgerock/json/JsonValue.html)*

  Raw JSON.

* `"latestAccessTime"`: *[java.time.Instant](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/time/Instant.html)*

  The timestamp of when the session was last used. Can be null if the DN isn't resident on the SSO token, or if the time cannot be obtained from the session.

* `"maxIdleExpirationTime"`: *[java.time.Instant](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/time/Instant.html)*

  The timestamp of when the session would time out for inactivity. Can be null if the DN isn't resident on the SSO token, or if the time cannot be obtained from the session.

* `"maxSessionExpirationTime"`: *[java.time.Instant](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/time/Instant.html)*

  The timestamp of when the session would time out regardless of activity. Can be null if the DN isn't resident on the SSO token, or if the time cannot be obtained from the session.

* `"properties"`: *[java.util.Map](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/util/Map.html)*

  A read-only map with the format `Map<String, String>`, where

  * Key: Name of a property bound to the session

  * Value: Value of the property

  The following properties are retrieved:

  * When `sessionProperties` in AmService is configured, listed session properties with a value.

  * When `sessionProperties` in AmService isn't configured, all session properties with a value.

  * Properties with a value that are required by PingGateway but not specified by `sessionProperties` in AmService. For example, when the session cache is enabled, session properties related to the cache are automatically retrieved.

  Properties with a value are returned, properties with a null value aren't returned

  Can be empty, but not null.

* `"realm"`: *[java.lang.String](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html)*

  The realm as specified by AM, in a user-friendly slash (/) separated format. Can be null if the DN isn't resident on the SSO token.

* `"sessionHandle"`: *[java.lang.String](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html)*

  The handle to use for logging out of the session. Can be null if the handle is not available for the session.

* `"universalId"`: *[java.lang.String](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html)*

  The DN that AM uses to uniquely identify the user. Can be null if it cannot be obtained from the SSO token.

* `"username"`: *[java.lang.String](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/lang/String.html)*

  A user-friendly version of the username. Can be null if the DN isn't resident on the SSO token, or empty if it cannot be obtained from the DN.

## More information

[org.forgerock.openig.openam.SessionInfoContext](../_attachments/apidocs/org/forgerock/openig/openam/SessionInfoContext.html)