Site Authentication
Introduction
When you add a new site to your AAArdvark Workspace, you may need to configure authentication settings to to access pages securely. Don’t worry—you can always update these settings later if needed.
From your dashboard, click the Add a New Site button at the top of the page.
Setting up Site Authentication
AAArdvark supports logging into your site before scanning, enabling you to access pages that aren’t available to the public. This feature is perfect for testing restricted or members-only content.
The credentials can be used for some or all pages on the site, an option that is individually configured on each page set up to be scanned.
AAArdvark offers three authentication methods to fit your needs: HTTP Basic, Login Form, and Custom Header.
HTTP Basic:
This form of authentication is commonly used for development sites that require a login to keep them private. Simply enter your username, password, and a test URL to confirm the credentials work.
Login Form:
This is for sites using a standard username and password login screen. Currently, only cookie-based login is supported.
Custom Header:
Use this method if your site requires custom headers for authentication.
Cookie Authentication is currently supported for WordPress, Drupal, and Laravel. Want another platform supported? Let us know by submitted a feature request.
To set up this method:
- Site Type:
Choose the platform your site is built on, and enter the username and password. - Username/Password:
Your credentials are stored securely with strong encryption. For added safety, we recommend creating a user account specifically for AAArdvark with limited permissions, just for accessibility scanning.- For extra protection, we recommend configuring your CMS to only permit this user to log in from our IP addresses. We will notify you if these IP addresses change in the future.
- 104.131.176.165
- 159.203.100.239
- 144.126.248.6
- For extra protection, we recommend configuring your CMS to only permit this user to log in from our IP addresses. We will notify you if these IP addresses change in the future.
Custom Login Pages
For Laravel sites with customized login pages, you may need to update the username, password, and/or submit button selectors to ensure everything works smoothly.
Customized login pages are not supported for Drupal and WordPress.