Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Authentication & logins

Authentication & logins

How do I handle a login that asks for email and password on separate screens?

Quick answer

Write the Login flow as one list: first the steps for the email screen, including the click that moves on, then the steps for the password screen and the final submit. Add a Success condition for the last page, then click Save.

Steps

  1. Find Login flow (one step per line) in the role's form login block.
  2. Describe the first screen. For an email screen, that could be Fill #email with username and then a click on the button that moves on.
  3. On the next lines, cover the second screen, such as Fill #password with password and Click submit. These selectors are examples, so swap in the ones from your own page.
  4. Choose a Success condition type and value for the page people reach at the end.
  5. Press Save.

Good to know

The login flow is a plain list, so a two-screen sign-in is just a longer list. Keep the lines in the order a person would follow. Put the button click that moves to the next screen on its own line.

Both values come from the role card: Username and Password. The flow refers to them by word, so each secret stays in its own field.

The capture shows no extra controls for waiting between screens. Does your sign-in need more, such as a code on a third screen? Look at the TOTP secret option or ask through /contact.

For the basic style, read how to write login flow steps. Use a scanning test account. Scan only what you have permission to test.

Test the sequence on your own by hand before you save it. If you need to press a button after the email and before the password, that button belongs in the list. The scanner follows your list and does not guess at the screens you leave out, so a missing click usually shows up as a sign-in that never finishes. Be literal.

Full tutorial

How to set up form login authentication in Cyberlop

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.