}
String encodedChallenge = generateSalt();
HttpServletRequest request = this.getThreadLocalRequest();
HttpSession session = request.getSession();
session.setAttribute(AuthenticationConstants.LOGIN_CHALLENGE, encodedChallenge);
return new LoginChallengeData(userSalt, encodedChallenge);
}