SecurityContext sc = exchange.getSecurityContext();
Account account = sc.getAuthenticatedAccount();
if(account != null) {
SingleSignOn sso = manager.createSingleSignOn(account, sc.getMechanismName());
registerSessionIfRequired(exchange, sso);
exchange.getResponseCookies().put(cookieName, new CookieImpl(cookieName, sso.getId()).setHttpOnly(httpOnly).setSecure(secure).setDomain(domain));
}
return factory.create();
}