Implementing a google reCAPTCHA V2 does not work on change your email screen

[komal_joshi]

Hi Experts,

The client I am working with would like to implement a reCAPTCHA v2 for change your email screen-set, I have configured every step required for google reCAPTCHA v2 settings but I didn't get captcha token in response. How would I able to solve this issue?

Is it possible to validate a reCAPTCHA v2 in change your email screen?

[former_member836771]

Hi Komal,

The CAPTCHA flow is only handled by SAP Customer Data Cloud (CDC) when

(i). there is a corresponding rule configured in the Risk Based Authentication (RBA) dashboard that enforces a CAPTCHA

(ii). the UM flow (i.e. login, registration, forgot password, etc.) is being handled using the Screen-Sets

you should configure this using the drag-and-drop UI Builder interface on CDC's admin console to place the CAPTCHA widget onto the appropriate screen handling the flow, and the captchaToken will be handled automatically by CDC's Web SDK when the Screen-Sets are invoked.

In-general, customizations to this flow are not really supported as CDC cannot guarantee the veracity of the process outside of the Screen-Sets, so you should not be expecting to receive a CAPTCHA token and using it manually.

If you are intending to carry out a REST implementation approach (API-based without Screen-Sets), then the CAPTCHA flow should be completely handled outside of CDC and once the site/application is satisfied that the CAPTCHA is completed successfully this can be indicated to CDC using the "captchaVerified" parameter of the "clientContext" object when calling the accounts.login REST API method.

Thank you.

Best regards,
Joshua

[komal_joshi]

Hi Joshua, Thanks for the information.

One more clarification required

• we have tried configuring the captcha widget on registration screen with RBA rules and there the captcha is working fine and we are getting the captcha Token as well. I have attached a screenshot for reference(1st image).
• we have tried configuring captcha widget on change your email screen under the profile update screen-set.
• we have configured a RBA rules as well but the thing is RBA does not have an option to enforce a captcha on change email screen.
• In the network tab we are not getting the captcha token i.e. on accounts.setAccountInfo I have attached a screenshot for reference(2nd image).

It looks like captcha is not supported in change your email screen.

Thanks,

Komal