reCAPTCHA v3 Connector
Use Descope's reCAPTCHA v3 connector to secure your authentication flow. reCAPTCHA v3 is Google's free service for bot protection and risk scoring. It helps distinguish legitimate users from automated traffic during authentication.
This guide shows how to configure the connector, add the widget to a screen, and run the reCAPTCHA assessment in your flow.
Note
Descope also supports reCAPTCHA Enterprise. To learn more, see the reCAPTCHA Enterprise guide.
Configure reCAPTCHA v3 connector
Navigate to the Connectors page in the Descope Console and select reCAPTCHA v3 to create a new reCAPTCHA v3 connector.
Configuring the connector
- Connector name: Provide a unique name for your connector. This assists in distinguishing it, especially when multiple connectors are derived from the same template.
- Connector description (optional): Briefly explain the purpose of this connector.
- Site Key: The site key from Google. For details, see reCAPTCHA overview.
- Secret Key: The secret key from Google. For details, see reCAPTCHA overview.
- Override Assessment (For Testing) (optional): Allows for automated testing by overriding the assessment model with a custom score. Not intended for production environments, only for testing.
- Assessment Score (0-1) (optional): When configured, the reCAPTCHA action returns this score without assessing the request. The score ranges from 0 to 1, where 1 indicates human interaction and 0 indicates bot activity. Learn more here.
reCAPTCHA v3 vs Enterprise
reCAPTCHA v3 is Google's free tier offering that provides basic bot detection and risk scoring. For more advanced features including SMS fraud detection, enhanced analytics, and better accuracy, consider upgrading to reCAPTCHA Enterprise. View a detailed comparison here.
Testing the connector
Before creating your connector, verify that the connector's configuration works. Once configured, simply click on "Test" and check the Test Results panel. Confirm, then click "Create."
Implementing the reCAPTCHA connector in your flow
1. Select or Create a flow
- Access your Dashboard -> Flows.
- Select an existing flow or create a new one.
2. Add the reCAPTCHA connector to the flow screen
In the editor, select a screen (typically the first screen), then add the reCAPTCHA widget from the risk section. Drag it onto the screen and click Done.
3. Add the reCAPTCHA connector to the flow
Warning
Since the reCAPTCHA connector runs in the browser, the connector steps need to be added after at least one screen or action component in the flow.
In the flow editor, click the create (+) button, select Connector, and choose reCAPTCHA v3 / Verify.
Place the connector after the screen where you added the reCAPTCHA widget, then click Save.
When a user runs through your authentication flow, the reCAPTCHA connector runs automatically and adds risk analysis to the riskInfo.riskScore context key.