Use shiro's session object instead of SSO(ASO)

[Ronald Luke]

Hello, list,

I am using shiro(tapestry-security) in my tapestry project. and since there is 
a 
session object in shiro, I am considering using this session object to store 
user specific data instead of SSO(ASO), but I am not sure if this is a good 
practice.

Please shed some light on this,

Thanks,

Ron