}
userMetadata.setCertificateChain(session.getClientCertificates());
Authentication auth;
if(anonymous) {
auth = new AnonymousAuthentication(userMetadata);
}
else {
auth = new UsernamePasswordAuthentication(userName, password, userMetadata);
}
authenticatedUser = userManager.authenticate(auth);