diff --git a/web/src/main/java/org/springframework/security/web/authentication/session/SessionFixationProtectionStrategy.java b/web/src/main/java/org/springframework/security/web/authentication/session/SessionFixationProtectionStrategy.java
index db030efa6ab..532310a0416 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/session/SessionFixationProtectionStrategy.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/session/SessionFixationProtectionStrategy.java
@@ -64,12 +64,6 @@ public class SessionFixationProtectionStrategy extends
 	 */
 	boolean migrateSessionAttributes = true;
 
-	/**
-	 * In the case where the attributes will not be migrated, this field allows a list of
-	 * named attributes which should <em>not</em> be discarded.
-	 */
-	private List<String> retainedAttributes = null;
-
 	/**
 	 * Called to extract the existing attributes from the session, prior to invalidating
 	 * it. If {@code migrateAttributes} is set to {@code false}, only Spring Security
@@ -124,36 +118,19 @@ void transferAttributes(Map<String, Object> attributes, HttpSession newSession)
 
 	@SuppressWarnings("unchecked")
 	private HashMap<String, Object> createMigratedAttributeMap(HttpSession session) {
-		HashMap<String, Object> attributesToMigrate = null;
-
-		if (migrateSessionAttributes || retainedAttributes == null) {
-			attributesToMigrate = new HashMap<String, Object>();
+		HashMap<String, Object> attributesToMigrate = new HashMap<String, Object>();
 
-			Enumeration enumer = session.getAttributeNames();
+		Enumeration enumer = session.getAttributeNames();
 
-			while (enumer.hasMoreElements()) {
-				String key = (String) enumer.nextElement();
-				if (!migrateSessionAttributes && !key.startsWith("SPRING_SECURITY_")) {
-					// Only retain Spring Security attributes
-					continue;
-				}
-				attributesToMigrate.put(key, session.getAttribute(key));
-			}
-		}
-		else {
-			// Only retain the attributes which have been specified in the
-			// retainAttributes list
-			if (!retainedAttributes.isEmpty()) {
-				attributesToMigrate = new HashMap<String, Object>();
-				for (String name : retainedAttributes) {
-					Object value = session.getAttribute(name);
-
-					if (value != null) {
-						attributesToMigrate.put(name, value);
-					}
-				}
+		while (enumer.hasMoreElements()) {
+			String key = (String) enumer.nextElement();
+			if (!migrateSessionAttributes && !key.startsWith("SPRING_SECURITY_")) {
+				// Only retain Spring Security attributes
+				continue;
 			}
+			attributesToMigrate.put(key, session.getAttribute(key));
 		}
+
 		return attributesToMigrate;
 	}