7.6 Configuring CAPTCHA

Self Service Password Reset has integrated support for the CAPTCHA protection. CAPTCHA prevents from automated attack. Self Service Password Reset uses the online re CAPTCHA service for CAPTCHA generation and validation. You must configure a reCAPTCHA account to use this service. Registration at the reCAPTCHA site provides a public and private key that you must configure in Self Service Password Reset for the reCAPTCHA support.

To configure the CAPTCHA settings:

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor > Settings > CAPTCHA.

  4. Configure the following settings:

    reCAPTCHA Public Key

    Specify the public reCAPTCHA key. Leave this field blank if you do not want to perform CAPTCHA verification.

    reCAPTCHA Private Key

    Specify the private reCAPTCHA key. Leave this field blank if you do not want to perform CAPTCHA verification.

    CAPTCHA Protected Pages

    Select the pages that must be CAPTCHA protected. Self Service Password Reset only requires the CAPTCHA validation for the first instance of a session. If during the same session the users visit all those selected pages, then they do not have to perform the CAPTCHA validation on each page.

    For example, if the parameter is okay, Self Service Password Reset skips the CAPTCHA validation for this request: /public/ForgottenPassword?skipCaptcha=okay.

    Captcha Skip Parameter Value

    Specify the parameters and include the skipCaptcha key for the parameters that you want to skip the CAPTCHA request. This setting is useful for internal clients and links where CAPTCHA is not required.

    Captcha Skip Cookie

    Specify the browser cookies. that you want Self Service Password Reset to skip the CAPTCHA request.

  5. Select Save changes.