1. A method comprising: determining, by a computer system, a first identifier identifying a first session associated with a user at a first data center, the first session comprising at least a first authentication state of the user with respect to a first resource; determining, by the computer system, a second identifier identifying a second session associated with the user at a second data center, the second session comprising at least a second authentication state of the user with respect to a second resource, wherein the second data center is different from the first data center; based on determining the second identifier identifying the second session at the second data center, assigning, by the computer system, the second identifier as a global identifier that is associated with any session that is associated with the user at the first data center, wherein execution of one or more session actions that reference the global identifier is performed using the first session at the first data center and using the second session at the second data center; and based on assigning the second identifier as the global identifier, associating the first identifier with the global identifier to associate the first session with the global identifier.