Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Authentication & logins

Authentication & logins

How do I tell the scanner how to recognise a successful login?

Quick answer

In the role's form login block, pick a Success condition type (Url Contains, Url Equals Exactly, Element Present or Text Contains) and type a matching value such as /dashboard. Click Save. The scanner uses it to decide that sign-in worked.

Steps

  1. Go to the role in Authentication and scroll down to the form login block.
  2. Use Success condition type to choose Url Contains, Url Equals Exactly, Element Present or Text Contains.
  3. Type the matching text into Success condition value. The placeholder example is /dashboard.
  4. Press Save.

Good to know

Sign in by hand once and note what changes when it works. Then choose the type that fits what you saw.

TypeUse it when
Url ContainsThe address after sign-in always includes a fragment, such as /dashboard
Url Equals ExactlyThe address after sign-in is always the same full URL
Element PresentA page element only appears once someone is signed in
Text ContainsA word or phrase only appears once someone is signed in

Choose something a failed sign-in cannot produce. A word like "Welcome" might also sit on the login page, so test it first. Short, plain values work best.

Does your address change after sign-in? Read what to do when the success page URL changes. The success condition works hand in hand with the login flow, so set both. If sign-in still fails, write to us through /contact.

A good check is specific enough to be true only when sign-in worked, yet loose enough to survive small changes to your pages. For most apps, a path fragment such as /dashboard meets both goals. Test with a wrong password by hand and make sure your chosen value does not appear.

Full tutorial

How to set up form login authentication in Cyberlop

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.