Signing in to Application Security for the first time

After you create and initialize your Application Security database, configure Tomcat server, and deploy Application Security in Tomcat, you can sign in to Application Security.

After you sign in, create at least one non‑default Administrator account, and then delete the default Administrator account. For more information about how to manage user accounts and roles, see About Application Security user administration.

To sign in to Application Security:

  1. In a web browser, type the web address for your Application Security instance.

    For a standard deployment, the default Application Security URL is https://<hostname>:<port>/ssc. For a deployment to a Kubernetes cluster, the default URL is <hostname>:<port> (without ssc at the end).

  2. Type your user name and password.

    Type admin in both the Username and Password fields. These are the default credentials for a new installation.

  3. Click SIGN IN.

  4. When prompted, change your password.

    Specify a strong password that does not include your user name or common phrases (names, movie or song titles, dates, or number or letter sequences). After your password is evaluated as strong, you can save it, and then sign in.

See next

Additional Application Security configuration

Setting the required password strength for Application Security sign in