ZAP Authentication Tester Session Handling Failed

[mats...@gmail.com]

Hi Simon,

     I am seeing when running ZAP Authentication Tester, user credentials works but it most of the time fails in session handling part(Attached is the Screenshot and Diagnostic Logs). Let me know what is that I missing to get this fixed. 

    Also is it mandatory for the session handling/verification URL to show status green for to use the user in Contexts

Thanks

Srikanth

[thc202]

Hi,

Are you including all necessary domains in scope?

It's not mandatory but you need to configure the session/verification
yourself when ZAP was not able to do that automatically.

Best regards.

[mats...@gmail.com]

I am not configuring any domains in domains tab. Most cases I see this is failing on Session Handling but some case I see this is passing. Not sure what exactly it is looking.

Thanks

Srikanth