public Serializable getSessionId() {
        return getTypedValue(SESSION_ID, Serializable.class);
    }
The session key that is used to store whether or not the user is authenticated.
core/src/main/java/org/apache/shiro/subject/support/DefaultSubjectContext.java