reCaptcha

Introduction

reCaptcha is a process that helps distinguish bot users from actual users.  It can be included in web forms or authentication or authorization processes to help filter out bots.

The check is executed on the front-end as well as the back-end, making sure the process cannot be bypassed.


We apply the following process:


  1. Upon form post, the Captcha string is included in the form post

  2. If the captcha check is required in the settings, the back-end will validate the Captcha string provided by the Front-end on the configured Captcha validation endpoint.

  3. After a successful captcha check, the registration can be completed, or the login can be handled.


There is also a ReCaptcha service that can be accessed by workflows.


Settings

Field Description
Secret Key The secret used to query the reCaptcha endpoint
Validation Endpoint The recaptcha validation endpoint
Key The site key your receive from the reCaptcha service.
Hostnames The hostnames that are registered that can use this key to run a reCaptcha check.
Required Pages
Below are the templates which can execute a ReCaptcha 
ADLogin This enables the backend captcha check on the Active Directory Login Template
IdpSelection This enables the backend captcha check on the IDP Selection template
Login This enables the backend captcha check on the IDHub Username & Password login Template
MobileRegistration This enables the backend captcha check on the Mobile Registration Template
PasswordReset This enables the backend captcha check on the Password Reset Template
Registration This enables the backend captcha check on the IDHub User registration Template

Applying Captchas to templates

If you enable a reCaptcha check in a template, you must also verify that the Captcha element is added to the template code.

Go to the specific template and make sure the following code is present:


<!-- CAPTCHA -->
  <div id="captchaWidget" class="row" show-element="<%captchaShow%>">
    <div class="col-lg-12">
       <div class="form-group">
          <div class="g-recaptcha" data-sitekey="<%captchaSiteKey%>" data-callback="onCaptchaResponse">
          </div>
       </div>
     </div>
   </div>
Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.