org.picketlink.idm.api.User idmUser = session.getPersistenceManager().findUser(user.getUserName()); authenticated = session.getAttributesManager().validatePassword(idmUser, password); } catch (Exception e) { handleException("Cannot authenticate user: " + username + "; ", e);