Authentication tester support

[Haro Haroon]

Hi everyone,

I’m currently working on a web application that requires three fields for authentication: Client ID, Username, and Password. I noticed that in ZAP’s Authentication Tester, I can only configure two fields (Username and Password).

I wanted to check if ZAP supports scanning applications that require an additional field like Client ID during login, and if so, what the best approach would be to configure this. Is there an option or workaround for handling such multi-field authentication flows in ZAP?

Thanks in advance for your guidance!

[kingthorin+zap]

You can goto the "Steps" tab and add handling for the additional field.