Enable CAPTCHA for External User Registration
The sn_ext_usr_reg.captchaEnabled controls if CAPTCHA will be validated for external user registration.
If the sn_ext_usr_reg.captchaEnabled system property is not set to the recommended value of true, then CAPTCHA isn't validated for external user registration and could lead to automatic account creation attacks.
Ensure that the property sn_ext_usr_reg.captchaEnabled is set to true.
More information
| Attribute | Description |
|---|---|
| Configuration name | sn_ext_usr_reg.captchaEnabled |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | true |
| Category | Authentication |
| Security risk | - Severity score: 3.7 - CVSS rating: Low - Security risk details: Enforcing CAPTCHA is critical to prevent bot-driven attacks and maintain the integrity of user onboarding. |
| Functional impact | None |
| Dependencies and prerequisites | None |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Authentication