Welcome
Getting Started
Basic Job Setup
You configure a job by choosing the settings that best enable AppScan® Enterprise to access to your application and run tests on it.
- URL and Servers
  URL and Servers view of the ADAC.
- Login Management
  Login Management view in Basic Job Setup.
  - Login tab
  - Review & Validate tab
    Scan Configuration > Login Management > Review & Validate tab
    - Action-Based editor
      Dialog that opens from Config > Login > Review & Validate > (Action-Based) Edit, can be used to troubleshoot the login procedure if validation fails.
    - Request-Based editor
      Dialog that opens from Config > Login > Review & Validate > (Request-Based) Edit, can be used to troubleshoot the login procedure if validation fails.
    - Advanced request selection
      Advanced In-Session Request Selection dialog box, that opens from Config > Login > Review & Validate > Advanced Request Selection
    - Advanced pattern selection
      Use this dialog to compare in-session and out-of-session responses to login requests, to help you decide on the detection pattern that is best for your application. Opened by clicking
    - Optimizing In-Session Detection
      Reviewing the login sequence can help troubleshoot and optimize in-session detection.
  - Session IDs tab
    Scan Configuration > Login Management > Session IDs tab.
  - Advanced tab
    Scan Configuration > Login Management > Advanced tab.
- One-Time Password (OTP)
  If required by your application, configure AppScan® to use OTP when logging in.
- Manual Explore
  Manual Explore enables you to focus the scan on specific parts of your application.
- Communication and Proxy
  Communication and Proxy view of AppScan® Dynamic Analysis Client (ADAC).
- HTTP Authentication
  HTTP Authentication view of the ADAC.
- Job Properties
  The final stage of the setup is defining Job properties.
Additional Job Setup
AppScan® Enterprise users with additional privileges assigned by the Administrator see Additional setup options below the Basic options in the left pane. Other users do not see these options.
Notices

Edit Request-Based Login dialog box

Dialog that opens from Config > Login > Review & Validate > (Request-Based) Edit, can be used to troubleshoot the login procedure if validation fails.

This is a simplified version of the Advanced In-Session Request Selection dialog.

Table 1. "Recorded Login Requests" settings
Setting	Details
Main list	Shows all requests the recorded login procedure.
Find	Show only requests that contain the text string you enter, in URL, Request, Response or All.
Filter Domains	Show only requests from domains selected in the drop-down list. Click for AppScan to perform the following actions:
Set as In-Session Request button	Sets the selected request as the In-Session Request, that will be used by AppScan during the scan to verify that it is still logged in. You can also do this by right-clicking on a request in the list.
	Show the response received to the selected request when the login was recorded. The window that opens has two tabs: The Browser tab shows the response received, and the Request/Response tab shows the raw data for both the request and the response.
	Delete the selected request from the login sequence.