Can I run authenticated scans of applications protected by Multi-Factor Authentication (MFA/2FA)?

If your application uses Time-Based One Time Passwords (TOTP) or OTP codes sent via E-mail then you can configure GoScripts to authenticate the scanner with your application.

If your system uses other forms of MFA then scanning may not be possible - OTP codes sent by SMS, for example, cannot be received by the scanner.  In these cases we reccomend disabling the MFA solution in question, perhaps in a non-production environment, or exclusively for the account used by the scanner.

See the below in-depth guides for instructions on how to set up scans for TOTP or Email-based MFA:

• Using TOTP
• Using Email

These guides assume existing familiarity with GoScript.  If you have not used GoScript before then it is recommended to start with our basic GoSCript Guide: A Guide to GoScript.