CB

CBs system plugin protect access from Joomla's user component being used outside of CB (e.g. backdoor login/registration). However the MFA page has a logout button. Review either removing logout URL blocking or see if MFA can be detected and allow that URL during MFA.