I would like to find out how JSESSIONID is actually created. Also is it unique everytime it is craeted. I tried logging in an application with a userid and note down the JSESSIONID. After logging out I logged in again using a different login information but the JSESSIONID remained the same. Would anyone know how I can make them unique to a particular user if that is possible.