MFA Issue

I've built a new site by installing and configuring Joomla 5.0.3 with:

• Community Builder 2.9.1
  • cb_profilebook (3.2.2)
  • cb_privacy (7.0.2)
  • cb_antispam (5.0.1+build.2024.01.26.15.06.27.28f57983a)
• rt_studius (1.1.0) template
• Multi-Factor Authentication Code by Email plugin

Other site information:

• PHP 8.2.15
• MySQLi 10.6.17-MariaDB

The problem is that when a user (me, who is also the Super Admin) attempts to login], the system returns this error: This occurs when the system attempts to move from  to .

I think that ' usncva.org/members/login.html ' should instead redirect to ' usncva.org/component/users/captive.html?Itemid=333 '. There is no step yet configured to move directly to a user profile.

Thank you!

Don White
 

Community Builder 2.9.1

Is this latest build release or 2.9.1 stable? If stable please install latest build release as there are MFA fixes in it. Once done retry and see if your issue persists.

CB doesn't control the MFA redirect. Joomla does that during Joomla's user login events, but what can happen is CBs backdoor protection kicks in and tries to redirect to CB instead of Joomla's user component causing an infinite loop, but that usually shows as an infinite loop error. That should be fixed though in latest build release.

Krileon,
The CB version installed and implemented on the website is the currently downloadable version. MFA works fine for me (Super User) when I log into the Joomla Admin backend but not through the front end using the CB Login form.
It continues to be a mystery.
Don White

To see if it's CB causing the issue navigate to System > Manage > Plugins and find CBs system plugin, which is usually named something like "Community Builder System plugin", and set both "Redirect URLs" and "Rewrite URLs" to "Disabled" then retry. Note this should be used temporarily. Leaving these disabled will allow people to bypass CB using Joomla user edit and registration pages unless you have explicitly disabled those. If MFA then works then it's CB causing the issue and will have a better idea of where to look to find and fix the cause.

Thank you, again, Krileon. I've never done anything with the System-Community Builder plugin other than ensure it was published. Using your suggestions, this issue is resolved.
Cheers!

Ok, thank you. Will retest MFA and see if there was something that was missed in the redirect check behavior.

forge.joomlapolis.com/issues/9372