Set up an Authentication Record for Selenium Authentication

This page provides information on how to install and uninstall the Qualys Browser Recorder, record the Selenium script using QBR, and use the script to authentication record. 

Qualys Browser Recorder Prerequisite

You need to download and install the latest version of the Chrome web browser.

The user needs to be aware of the basics of JavaScript and HTML concepts to execute effective and successful automation test scripts.

QBR can also be installed and used with the latest version of Microsoft Edge.

Install Qualys Browser Recorder

1. Open the Chrome Web Store or Edge Add-ons Store.
2. Search for Qualys Browser Recorder.

   

   Use of this extension shall be deemed to be acceptance of these terms. This extension is provided to you "as is." To the extent permitted by law, Qualys hereby disclaims all liability for the provision or use of this extension.

3. Click Add to Chrome or Add to Edge.

   QBR is supported on Chrome and Microsoft Edge browsers.

   

4. Once installed, open Extensions from your browser toolbar and click Manage Extensions.
5. Enable the Allow in Incognito toggle.

   

Record Authentication Steps

1. Open a new Incognito window.
2. Launch the Qualys Browser Recorder from the extensions icon.
3. Click Record.

   The QBR window will minimize automatically.

   

4. Perform your usual login flow in the browser with your credentials.
   • All your actions will be automatically captured by QBR.
5. After completing the login process, click Stop Recording.

   

WAS Parameter in Selenium Script

We currently support only three parameters in WAS that can be used in the Selenium script.

For more details on usable WAS parameters in Selenium Script, click Create Selenium Scripts Using Qualys Browser Recorder.

Verify Successful Login

Find a unique word or text that appears after successful login and add it to the script using the verifyTextPresent command.

• Use a single word without spaces.
• Add a pause (10,000 milliseconds) during page transitions for smoother playback.

Save and Test the Script

1. To save the test script, click Save and store the script in a secure location.

   

2. Close the Incognito browser using the Close Incognito button in QBR (to clear cookies and cache).
3. Open a new Incognito window, load the saved script, and click Play.

   

   When the script runs successfully, you’ll see all steps turn green and the Test case passed in the QBR logs.

   

   This indicates your Selenium authentication script is ready to use.

Add the Script to the Authentication Record

1. Go to your Authentication Record in the Qualys WAS UI.

   

2. Upload the Selenium script you recorded.
3. In the Regular Expression (Regex) field, add .*
   • If you have already included a post-authentication verification in the script.
   • If not, specify the text word that indicates a successful login.

Ensure that the authentication record is added to your Web Application Configuration and is set as the Default.

Test the Authentication Record

After you add your script:

Run a Test Authentication scan on your web application.

Verify that the authentication is successful and your login flow works as expected.

Uninstalling Qualys Browser Recorder

1. Open Chrome browser and right-click on Qualys Browser Recorder icon in the menu bar and simply select Remove from Chrome or select Manage Extensions.

   

   The Extension web page opens with Qualys Browser Recorder extension selected.

2. Click Remove extension icon located at the bottom of the page.

   

3. Click Remove in the Confirm Removal pop up window.