Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Authentication & logins

Authentication & logins

My app doesn't land on a fixed URL after login. How do I set the success condition?

Quick answer

When your app lands on a different URL each time, do not use Url Equals Exactly. Choose Url Contains with a stable fragment, or use Element Present or Text Contains for something only a signed-in page shows. Then enter the value and save.

Why this happens

After the login steps, the scanner checks the success condition to decide that sign-in worked. If your app sends people to a changing address, a check for one exact URL never matches. The scanner then treats the sign-in as failed.

How to fix it

  1. Open the profile and choose Authentication.
  2. In the Form login block, open Success condition type.
  3. Choose a type from the table below.
  4. Type the value in Success condition value. The example in the form is /dashboard.
  5. Click Save and run the scan.
TypeUse it when
Url ContainsPart of the address stays the same, such as /dashboard
Url Equals ExactlyThe address never changes
Element PresentA button or menu only appears after sign-in
Text ContainsA phrase such as a welcome line appears after sign-in

Pick something that a signed-out visitor never sees. A match on a shared page would count as success too soon.

Test the check in your own browser before you save it. Sign in, look at the address bar and the page, and decide which part of it is stable from one sign-in to the next. When the address carries an ID that changes, ignore the ID and match the path in front of it, because that part of the address is the same for every sign-in. Simple.

Still not working?

Sign in by hand and note what changes on the page. Then match that. Should the page need several screens, add the steps to the Login flow, one per line. See scanner stuck at login for the full check, or write to /contact.

Full tutorial

How to set up form login authentication in Cyberlop

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.