Home / Help centre / Authentication & logins
Authentication & logins
How do I set up form login for the scanner?
In the scan profile's Authentication section, add a role, keep Form ticked, then fill in Login type, Login URL, Username, Password, a Success condition and the Login flow, one step per line. Click Save. The scanner then signs in with those details before it tests the app.
Steps
- Go to Authentication in the profile and click + Add role. Name it something short, such as
admin. - Confirm the Form box still has its tick under Authentication methods. It starts that way.
- Inside the form login block, choose a Login type. Then type the Login URL, for example
https://app.example.com/login, followed by the Username and Password. - Pick a Success condition type and a Success condition value, such as
/dashboard. This tells the scanner what a good sign-in looks like. - Add the Login flow, one step per line.
- Press Save at the bottom of the page.
Good to know
Each field has a clear job. Use this table as a checklist.
| Field | What to enter |
|---|---|
| Login URL | The page where people sign in |
| Username / Password | A test account made for scanning |
| TOTP secret | Optional, only if the account uses an authenticator code |
| Success condition value | A fragment such as /dashboard |
| Login flow | Steps such as Click "Sign in" or Fill #email with username |
The password field hides what you type. When you edit the role later, the saved secrets stay hidden too. Want to see the settings before you commit? Preview YAML builds the configuration for you.
Each part has its own guide: choosing a login type, the success condition and the login flow. Only test apps you have permission to test.
Work through the block from top to bottom, then check the success condition against what you see when you sign in by hand. If the page address changes after sign-in, choose a value that still matches. Short and stable beats clever.
Related questions
- How do I choose between the FORM, SSO, API and BASIC login types?
- How do I tell the scanner how to recognise a successful login?
- How do I write the login flow steps?
- How do I handle a login that asks for email and password on separate screens?
- How do I let the scanner get past a TOTP two-factor prompt on my app?
How to set up form login authentication in Cyberlop
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.