How do I write the login flow steps?

Steps

1. Reach the form login block of your role and look for Login flow (one step per line).
2. Type each action the scanner should take on its own line. Keep the order a person would follow.
3. Copy the shape of the placeholder text: Click "Sign in", Fill #email with username, Fill #password with password, Click submit.
4. Press Save.

Good to know

• Give every action a line of its own. Two clicks in one sentence blur the order.
• A Fill line names a field, such as #email, and what goes in it. The words username and password point at the values you saved in the role, so real secrets never appear in the flow.
• Trim the list. Include only what someone must do to reach the signed-in app.

Use the selectors from your own page, not the sample ones. Your developer tools can show them.

Pair the flow with a success condition so the scanner knows when it has arrived. If your sign-in spans several pages, see how to handle separate screens. Use a scanning test account. Only test apps you have permission to test.

Not sure the list works? Run it by hand first, line by line, on a clean browser window. Where you stumble, the scanner will too. Then fix the line that failed.

Related questions

• How do I handle a login that asks for email and password on separate screens?
• How do I tell the scanner how to recognise a successful login?
• How do I set up form login for the scanner?
• The scanner isn't getting past my login page. What should I check?
• How do I let the scanner get past a TOTP two-factor prompt on my app?

Full tutorial

How to set up form login authentication in Cyberlop

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre