Home / Help centre / Authentication & logins
Authentication & logins
What is an authentication role?
An authentication role is a login identity the scanner uses. It has a name, a privilege level (Unauthenticated, User, Elevated or Admin) and one or more methods: form login, header token or API key, or OAuth 2.0 client credentials. It can also carry AI guidance.
The short version
Think of a role as one login identity the scanner uses. Each carries a name, a privilege level (Unauthenticated, User, Elevated or Admin) and one or more methods: form login, a header (token or API key), or OAuth 2.0 client credentials. Free-text AI guidance is optional.
How it works in Cyberlop
Roles live on a scan profile, in the Authentication section. Each role is a card with a name, a privilege badge and a method badge. Add one with + Add role.
You can tick more than one method on a role. Form login covers sites with a sign-in page. A header suits tokens and API keys. OAuth 2.0 lets Cyberlop mint a token when the scan runs.
| Part | What it holds |
|---|---|
| Name | A label such as admin |
| Privilege level | Unauthenticated, User, Elevated or Admin |
| Methods | Form, Header, OAuth 2.0, alone or together |
| AI guidance | Optional notes on how to use the credential |
Several roles let one scan check what each signed-in account can reach. The sitemap marks endpoints with a role chip. No roles? Then the scan runs without a login.
What to do next
Add your first role with these steps, or learn what each privilege level means. For two accounts, follow the two-role guide. The idea builds on authentication. Use test accounts and test only what you have permission to test.
Related questions
- How do I add a login role to a scan profile?
- What privilege levels can a role have?
- Which login methods does Cyberlop support for scanning behind a login?
- How do I set up two user roles so the scanner can test access between accounts?
- How do I run a scan without any login?
How to scan behind login in Cyberlop with authentication roles
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.