How should I use Idempotency-Key when retrying session creation?

Use one unique Idempotency-Key per intended session.

If you need to retry, send the same request body with the same key. Reusing that key with a different body can cause a conflict. Keys are remembered for 24 hours, so use a fresh one for each new session.