
To access it, expand and double-click Session Token Store. The view displays each session token as a row that includes the status of the token plus all the metadata values submitted by the requesting component, which should help you on your decision to approve or reject the token.
When approving a token, you must select the Signing Profile to which this request should be associated. The CSR will be signed by the CA certificate defined in that profile.

You can approve a rejected token at a later date provided the token has not automatically been removed before.