Skip to content

Bot detection

This guide explains how you can enable bot detection for your applications to mitigate abuse from bots and other automated attacks. WSO2 Identity Platform supports reCAPTCHA, a service provided by Google which can protect your applications from spam or other forms of internet abuse by distinguishing human requests from automated ones.

Enable reCAPTCHA from the Console

To enable bot detection, proceed with the following:

  1. On the WSO2 Identity Platform Console, go to Login & Registration > Login Security > Bot Detection.
  2. Toggle the switch on to activate reCAPTCHA for your organization.

Bot Detection Configuration

Tip

Bot detection enables reCAPTCHA for the following flows:

  • Single sign-on (SSO)
  • Self-registration
  • Password recovery
  • Account recovery