To add an extra layer of protection to your site to help prevent potential anonymous password resets and account requests from being initiated from from automated software, your organization can register for a free Google reCAPTCHA account. Once you have an account, you can integrate it with EmpowerID as an OAuth Provider application. To do so, edit the default Google reCAPTCHA OAuth provider in EmpowerID, adding the Site Key and Secret Key associated with your reCAPTCHA account.
| Page Properties | ||
|---|---|---|
| ||
captcha |
To get reCAPTCHA and learn more about setting it up for your domain, visit https://www.google.com/recaptcha/intro/.
...
| Warning |
|---|
If you view a page that requires reCAPTCHA prior to configuration and you get a misconfiguration message, clear the browser cache before accessing the page again. After configuration, reset IIS. |
Integrate Google reCaptcha
On the navbar, expand Single Sign-On > SSO Connections, and select OAuth / OPenID Connect.
On the External OAuth Provider tab, search for Google reCAPTCHA and click the Provider link.
This opens the External OAuth Provider Details for reCaptcha. You use this view to add your provider details.
In the grid, click the Edit button for the Google reCAPTCHA provider.
In the General dialog that appears, do the following:
Enter the Site key in the Consumer Key field.
Enter the Secret key in the Consumer Secret field.
Click Save.
Recycle the EmpowerID app pools to have your changes take immediate effect.
Disable Google reCAPTCHA without removing your keys
On the navbar, expand Object Administration and select Workflows.
On the Workflow tab, search for PasswordResetCenterMFA and and click the Display Name link for the workflow.
On the Workflow Details for the workflow that appears, expand the Request Workflow Parameters accordion and search for UseCaptcha.
In the search results, click the Edit button for the UseCaptcha parameter, which is set to true by default.
Change the Value of the parameter from true to false and click Save. Do NOT change the Name field, as EmpowerID uses this to determine which parameter to change. If you change the Name field, the parameter is ignored.
Recycle the EmpowerID app pools to have your changes take immediate effect.
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|