Configure Credentials Settings in a Tenable Web App Scanning Scan

Required User Role: Scan Manager or Administrator

You can configure credentials in your Tenable Web App Scanning scans to allow the scanner to access protected areas of your web application. By providing authentication details, you ensure a more comprehensive vulnerability analysis of pages behind login screens, improving the depth and accuracy of your scan results.

Before you begin:

  • (Cookie authentication) Determine the cookie authentication credentials for the web application you want to scan.
Note: The Tenable-provided Selenium extension is no longer supported. The Edge and Firefox extensions provided by Selenium directly are supported.

To configure credentials settings in a Tenable Web App Scanning scan:

  1. Create or edit a scan.

  2. Click the Credentials tab.

    The credentials details appear.

  3. Do one of the following:

    • The Previously Saved Credentials section of the Credentials plane contains any credentials where you have Can Use or Can Edit permissions.

      1. (Optional) Search for a managed credential in the list by typing your search criteria in the text box and clicking the button.

      2. In the Previously Saved Credentials section, click each saved credential you want to add.

        The Credentials plane remains open.

      3. To remove a saved credential, click the close button in the row.
      4. To edit saved credential, click the close button in the row.

      1. Click the Add Add Authentication Type dropdown list.

        The authentication types appear:

        • HTTP Server Application
        • Web Application Authentication
        • Client Certificate Authentication
      2. Click the credential type you want to create:

        The settings plane for that credential type appears.

      3. Configure the settings for the credentials type:
  4. Add user permissions.

  5. Click Save to save the credentials changes.

    Tenable Web App Scanning closes the settings plane and adds the credentials to the credentials table for the scan.

    If you created new credentials, Tenable Web App Scanning adds the credentials to the credential manager.

  6. Click Save to save the scan changes.