22
Views
2
Comments
[One Trust - Cookie Consent] OneTrust web scan of Outsystems applications with different authentication methods
onetrust
Reactive icon
Forge asset by Vitor Oliveira
Application Type
Reactive

I'm implementing OneTrust Cookie Consent in our Outsystems applications. 

To identify the cookies used in the application domain, and generate the corresponding cookie consent scripts, the first step is to tell OneTrust to execute a web scan over the domain.

If the application has pages behind an authentication form, the web scan needs to be configured with a login form, as described in the article below.

https://my.onetrust.com/s/article/UUID-c2b2aec4-f46d-b21e-2269-94cd62c6f2a8

However, we have applications with different authentication methods under the same domain - one that authenticates with Users, other with ServiceCenter. OneTrust only supports the configuration of one login web form on a single domain.

OneTrust Support team's suggestion is to add Authentication Cookies to the scan, I have identified these cookies from the article below - nr1Users and nr2Users - but I don't know what values I should set them to in OneTrust configuration to simulate an authenticated user for the web scan.

https://success.outsystems.com/documentation/11/security/configure_app_authentication/#authentication-cookies


2025-01-15 08-35-04
Vignesh Sekar

Hi ,


we have setcookie and getcookie function/serveraction from Http request handler build in extension

you can use this where ever you want to add cookie you need to give cookie name and value


Hope it will help !.


.


2022-02-09 17-18-50
Rafaela Azinhal

I'm sorry, I did not make myself clear. I've rephrased the last sentence, for what I think is asked in OneTrust article:

Scanning Behind Authentication

Using Cookie Consent, you can scan websites that require authentication in a variety of ways. Determine which method is suitable for your website and rescan your website. For implementation examples, see Example Scan Login Scenarios.

To add authentication cookies to a scan

Authentication cookies can be used to help the scanner bypass authentication elements on websites such as age verification, registration forms, or terms and conditions acceptance.

1 On the Cookie Consent menu, select Websites.  The Websites screen appears.

2 Select the Website you would like to scan. The Website Details screen appears.

3 Navigate to the Login Settings tab.

4 Select Authentication Cookies. The Authentication Cookies screen appears.

5 In the Cookie Name field, enter the name of the cookie.

6 In the Cookie Value field, enter the corresponding value for the cookie.

NOTE If you need assistance locating the cookie names and corresponding values, contact your IT or website administrator.

7 Click the Save button.

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.