Krileon,

I very much appreciate Joomlapolis's quick update to work with Joomla 4.2.2. Thanks1

There are, however, three intermediate issues with the MFA implementation:

• The CB AntiSpam plugin does not offer an "MFA" option to configure.
• Selection of a CAPTCHA (other than the Invisible ReCAPTCHA variant) and its use by external users results in a message stating that the user has successfully logged in; the field to enter the emailed MFA token (in the case of the email variant) is on the same resulting screen but seems to have been bypassed.
• Any MFA plugin seems to be redundant when used with a CAPTCHA tool.

Anyway, thanks again!

I know understand that MFA has nothing to do with CAPTCHA and that MFA cannot be bypassed by CB.
My suggestion, instead, has everything to do with the CB AntiSpam plugin.

That plugin drives the CAPTCHA displayed on the CB Login form - see the screen shot:
 

Since the implementation of MFA - Code by Email provides the strongest secure login possible (one-time pads are always the most secure method to super-encrypt any communication), the additional use of a CAPTCHA tool is redundant.
(I apologize for any arrogance or snarkiness on my part; I served 20 years in the Navy as a cryptologist, analyst, and software writer in the dark ages, when AGILE was known as Rapid Prototyping, Waterfall, etc.)

The  AntiSpam plugin, if implemented in CB, requires designation of a CAPTCHA tool. I suggest that it could be updated to allow NO choice so that users might not be confused into thinking that the username + password + CAPTCHA combination actually logs them into the website without a further step.
 

If my suggestion is out of line or difficult or impossible to implement, that's life.

Thanks for your consideration.

 

When I read your suggestion, I slapped my head and thought: "Don, you're an idiot!" So I went into the Admin backend, opened the CB AntiSpam plugin and disabled CAPTCHA for Login.
However, what happened wasn't expected. Yes, ReCAPTCHA no longer displayed with the CB Login form. However, when I attempted to login to the Front End, the MFA Validation screen did not appear (it had defaulted to the template Homepage). Even after returning the configuration to what it had been and clearing the caches, the MFA Validate screen no longer appeared.
It seems, from Joomla Forum entries, that this is not unusual since Joomla 4.1.5 and 4.2.2 were published. The question seems to be, is it a problem with Joomla or with RocketTheme (we use the Callisto RT theme).
Oh well.