CAPTCHA Control Via API

Feature: Provide the ability to alter CAPTCHA-related settings via API.

Description: It would be helpful if one could use API calls to update CAPTCHA related settings in response to observations that users of Auth0 make. For example, if we receive signals from our bot management solution that a credential stuffing attack is underway, we would like to set Auth0’s CAPTCHA settings to “Always on.”

Use-case: Typical usage of CAPTCHA would likely see us setting this feature to “When Risky,” with a “Low” Bot Detection Level to keep user friction low. But if we observe signals that suggest that an attack is underway, we would like to be able to update these settings to “Always on” or to “High” for a BD Level via an API call instead of requiring a manual setting update by a human.

Hi @orogers,

Thanks for the feature request!

1 Like