Google reCAPTCHA Enterprise in Universal Login

Get Help
,
1

Hello, I want to add Google reCAPTCHA Enterprise in Universal Login to prevent bot attempts to signup and login.

Given that my plan includes the Attack protections package, I followed the procedure that in Google reCAPTCHA Enterprise on Google Cloud Platform (GCP) to add the CAPTCHA, but it seems to not work.

I set all the parameters to render the reCAPTCHA, but, when I open the Universal Login, the browser cannot load the CAPTCHA. Script at https://www.recaptcha.net/recaptcha/enterprise.js doesn’t load due to Content Security Policy issues.

I don’t know how to solve it. Are there missing steps in the guide I need to accomplish to make reCAPTCHA work within the Universal Login?

Thanks in advance for your help.

3

Hi @gilberto.taccari,

Have you made sure that your Bot Detection settings have enabled Always to enforce captcha for flows with passwords?

Thanks,
Rueben

4

Unfortunately it doesn’t fix because, as said before, the problem is located in CSP. But I found a fix, thanks for your comment.

5

I found a solution by updating the custom template we use for Universal Login. I’ve added there the declarations to update CSP and allows the loading of Google reCAPTCHA.

Reference: https://auth0.com/docs/customize/login-pages/universal-login/customize-templates

6

Hi @gilberto.taccari,

Thanks for sharing your solution with the rest of the Community! :bowing_man:

Feel free to reach out to us again if you have any questions.