title: Are SAML tokens cache/stored anywhere on the browser?
body: <p>Scenario: </p>
  
  <ol>
  <li>Browser(User) requests resource from Service Provider (SP).</li>
  <li>SP Redirects (with SAML Request) to Identity Provider (IdP).</li>
  <li>Since it is first login, User gives the (IdP) his/her valid credentials.</li>
  <li>IdP then redirects Browser (with SAML Response which includes SAML token) to the SP page.</li>
  </ol>
  
  <p>I have two questions:</p>
  
  <p>A. In Step 4, does the Browser store or cache the SAML Response and/or SAML token?</p>
  
  <p>B. If yes, what kind of things (attributes? timeouts? protocols?) prevent me from taking that stored SAML token.  Then coping it over to another computer (with a new session) and using that token to Login to the same SP?</p>