Configuring reCaptcha for Username Recovery¶
The user account recovery feature implemented in the WSO2 Identity Server helps to recover the username of the account in case the user forgets it. This recovery process can also be secured with captcha verification.
By configuring reCaptcha, you can mitigate or block brute force attacks.
Note
For more information on setting up username recovery, see Username Recovery.
For more information on brute force attacks, see Mitigating Brute Force Attacks
.
There are two ways to configure this feature.
Configuring username recovery with reCaptcha for a tenant¶
Follow the instructions given below to configure username recovery with reCaptcha for a specific tenant.
- Set up reCaptcha with WSO2 Identity Server. For instructions on how to do this, and for more information about reCaptcha, see Setting Up ReCaptcha .
- Enable the EnableMultiTenancy context-parameter in the accountreoceryendpoint web.xml file.
- Start WSO2 Identity Server and log into the management console as tenant admin.
-
On the Main tab, click on Identity Provider → Resident Identity Provider.
-
Expand the Account Management Policies tab, then click on Account Recovery.
-
Select the Enable reCaptcha for Username Recovery checkbox to enable reCaptcha for the username recovery flow.
-
You have now successfully configured reCaptcha for the username recovery flow. Start the WSO2 Identity Server and log into the end user user portal.
Tip
If you have changed the port offset or modified the hostname, change the port or hostname accordingly.
-
Click on Forgot Username.
Enter the domain name in the page that appears next.
Clicking on Forgot Username redirects you to the following page where you can select the recaptcha option for username recovery.
Configuring username recovery with reCaptcha globally¶
Follow the instructions given below to configure username recovery with reCaptcha globally.
-
Add the following properties to the
deployment.toml
file in theIS_HOME/repository/conf
folder to enable username recovery with reCaptcha.Tip
To avoid any configuration issues, perform Step-1 before starting the WSO2 Identity Server product instance.
[identity_mgt.username_recovery.email] enable_recaptcha= true
-
Set up reCaptcha with WSO2 Identity Server. For instructions on how to do this and more information about reCaptcha, see Setting Up ReCaptcha .
-
You have now successfully configured reCaptcha for the username recovery flow. Start WSO2 Identity Server and log into the end user user portal.
Tip
If you have changed the port offset or modified the hostname, change the port or hostname accordingly.
-
Click the Forgot Username link.
Clicking on Forgot Username redirects you to the following page where you can select the recaptcha option for username recovery.
Top