wcf - Federated security, Single Sign On and security token sharing -

in single sign on (sso) scenario if applications running in same domain/company,

1. is same security token shared among applications (relying parties) users authenticated same common identity provider / security token service? default behavior of sts? e.g. user logs on application x. after time, tries access application y. since authenticated same sts , if token issued still not expired, won't have provide credentials while accessing application y.
2. my understanding may possible if token contains claims required relying parties / applications. practice?
3. can token's (which issued when user logged on application x) expiry time extended/reset when user connects application y?

wif implies adfs usually,

1. yes long rp using same sts.

2. no - in adfs, each rp has own claims configuration. token produced different (although copy configuration if wanted).

3. in wif, yes. need use "sliding token" mechanism.