Home / Help centre / Authentication & logins
Authentication & logins
How do I choose between the FORM, SSO, API and BASIC login types?
In the role's form login block, open the Login type select and choose FORM, SSO, API or BASIC to match how your app signs people in. FORM is the default. Fill in the URL and credentials, then click Save. Ask us through the contact page if you are unsure.
Steps
- In Authentication, add a role or reopen one. Keep Form ticked.
- Find the Login type select at the top of the form login block.
- Choose FORM, SSO, API or BASIC. The list starts on FORM.
- Complete Login URL, Username and Password. Add a success condition and a login flow where your app needs them.
- Press Save when you are done.
Good to know
Match the type to the way your app really signs people in. The names point the way, as the table shows.
| Type | Pick it when |
|---|---|
| FORM | People type a username and password into a web page |
| SSO | People sign in through a separate identity provider |
| API | The sign-in happens through an API call |
| BASIC | The app uses basic authentication |
The captured app lists these four options but does not describe what each one does behind the scenes. Not sure which fits? Ask through /contact before you spend a scan on it.
Some apps take a key or token and have no sign-in page. For those, form login may not be the right method at all. Read the login methods overview to compare. Note that the SSO login type belongs to the app you scan. Single sign-on for your own Cyberlop workspace is a separate setting.
You can change the type later. Reopen the role, pick another option and save again. Nothing else on the profile needs to move, and the target stays as it was, because a profile's target cannot change after creation and the login type lives only on the role.
Related questions
- How do I set up form login for the scanner?
- Which login methods does Cyberlop support for scanning behind a login?
- How do I authenticate the scanner with an API key header?
- How do I tell the scanner how to recognise a successful login?
- How do I combine form login and a header token for one role?
How to set up form login authentication in Cyberlop
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.