Overview
The option to enforce CAPTCHA for the password reset flow is not shown in the tenant dashboard.
This option should be found under Security > Attack Protection > Bot Detection > Enforce CAPTCHA for the password reset flow.
This is a new feature (as of MAY 30, 2024) available in the password reset flow. See the Auth0 Changelog for more details.
Solution
Certain tenants need to have enabled a specific flag enabled. Please contact Auth0 support to have this flag enabled, referencing this article.