Auth0 Bot Detection and CAPTCHA Options for Users in China

Auth0 offers multiple bot-detection options, but regional restrictions in China affect availability. Auth0 Simple Captcha functions correctly in China, while Auth Challenge and Google reCAPTCHA experience blocks. Additionally, Auth0 does not currently support conditionally hiding CAPTCHA based on geographic location.

• Auth0
• Bot Detection
• CAPTCHA

Which Auth0 bot detection options function correctly in China?

Review the following list to determine the compatibility of various bot detection providers in China.

• Simple Captcha: The Auth0 native built-in image CAPTCHA functions without issues in China.
• Auth Challenge: Cloudflare Turnstile powers this feature and remains unavailable in Mainland China.
• Google reCAPTCHA: The Great Firewall in China broadly blocks Google services, preventing this option from functioning.
• hCaptcha and Friendly Captcha: No current documentation suggests these providers experience blocks, making them viable options for testing.

NOTE: Auth0 recommends utilizing Simple Captcha to ensure a seamless experience for users in China. Administrators must test the configuration thoroughly in a lower environment before deploying the changes to production.

Does Auth0 support conditionally displaying CAPTCHA based on geographic location?

Auth0 does not offer a native configuration in the Bot Detection settings to conditionally hide or display CAPTCHA based solely on geographic location. The Bot Detection enforcement settings (Never, When Risky, Always) apply globally to the tenant. When administrators set the configuration to When Risky, the Auth0 risk engine dynamically prompts the user based on behavioral signals and IP reputation. The Auth0 platform cannot explicitly exclude a specific country from these prompts.

Open a feature request for the Auth0 Product Team to consider adding geographic conditional triggers for CAPTCHA.