SAP Knowledge Base Article - Preview

3785461 - RBA and reCAPTCHA Enterprise Are Not Triggered During Passkey Authentication in SAP Customer Data Cloud

Symptom

Risk-Based Authentication (RBA) rules configured with Google reCAPTCHA Enterprise are successfully triggered during standard email-and-password login.

However, when users authenticate using passkeys, the configured RBA rules are not evaluated.

The following behaviours may be observed:

  • A reCAPTCHA Enterprise RBA rule blocks or challenges users during email-and-password login as expected.
  • The same RBA rule is not triggered during passkey authentication.
  • RBA actions such as block, challenge, or step-up authentication are not applied after a passkey is verified.
  • No configuration option is available to enable reCAPTCHA Enterprise assessment for the passkey flow.


Read more...

Environment

  • SAP Customer Data Cloud
  • Risk-Based Authentication
  • Google reCAPTCHA Enterprise
  • Passkey authentication
  • FIDO/WebAuthn
  • Screen-Sets
  • Hosted Pages
  • Web SDK
  • REST API implementations

Product

SAP Customer Data Cloud all versions

Keywords

KBA , CEC-PRO-PNS , Privacy & Safety (Consent, RBA - Risk-Based Authentication) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.