I have TFA enabled in Joomla 3.3.6. It works fine when I login with the Joomla login page.
The CB 2.0.4 login page on my site doesn't display a "Secret Key" field. And it allows users with TFA enabled to login without having to type in a secret code.
802eyecare.com/add