Invalid Captcha

Verified, registered users of idahospiritualcompanions.org are unable to login to the website and their Profiles. When they enter their username, password, and click the Login button, they immediately receive the 'Invalid Captcha Code' error message.
What should occur is that the MFA verification form should appear, instead.
 
The Captcha tab of the CB AntiSpam plugin (5.0.1+build.2024.03.01.19.04.57.c7efbbab2) is configured to use 'Honeypot (Internal)' and the site Global Configuration is set to use CB AntiSpam as the designated Captcha source.
I appreciate any and all suggestions.
Thank you!

Honypot login captcha seams to work fine in my tests. Did you change the honeypot input name under Captcha > Modes > Internal > Honeypot? It's possible it's set to something getting filled in by browser auto complete. I don't typically recommend having captcha for login though, which can be turned off under Captcha > Legacy tab. Does this only happen to accounts that have MFA enabled?

Yes, it did happen with accounts for which MFA was active. However, I've disabled MFA now. CB Login seems to work (few users for this development website), but the auto-redirect to the user's Profile doesn't occur. However, the link for users to open their Profile (Members main menu | Your Profile) does open the person's Profile now. Before, clicking that link redirected to the Home page of the template.
Thanks again, Krileon.

but the auto-redirect to the user's Profile doesn't occur.

If you've multiple CB login modules be sure they're all configured properly. Login redirect should always be non-SEO beginning with index.php. Example as follows.

index.php?option=com_comprofiler&Itemid=PROFILE_MENU_ID_HERE

That should safely redirect to profile every time. This assumes you don't have some other redirect taking over. For example CB Auto Actions could potentially redirect away or a 3rd party Joomla plugin could.

Note the login module redirect will not override first login redirect URL configured in CB > Configuration > Registration. So if this is the first time the user is logging in you may want to be sure that parameter is empty or also configured properly to redirect to profile.

Ok, so it sounds like there's an issue with login captcha and MFA. The MFA is probably hijacking the login before the Captcha can properly verify and gets stuck in a redirect loop of some kind. Will have to look into this further, but am unsure if it'll even be fixable as we're limited on how we can interact with Joomla's MFA implementation.

forge.joomlapolis.com/issues/9382

Have added a bug ticket to investigate further, but I just don't recommend using login captcha regardless. It's a legacy implementation for CB AntiSpam and will probably be removed eventually.

Did you change the honeypot input name under Captcha > Modes > Internal > Honeypot?

No.

I don't typically recommend having captcha for login though, which can be turned off under Captcha > Legacy tab.

Login was - and remains - turned off under Captcha | Legacy.

There were/are no additional login modules - just the CB Login module.

Login redirect should always be non-SEO beginning with index.php: index.php?option=com_comprofiler&Itemid=PROFILE_MENU_ID_HERE

I reconfigured the CB Login module to login as you suggest above (using the Login menu ID). I also removed the default login redirect URL to <blank> in CB Configuration.
Result: Success!
Prior to this, I disabled MFA (all types). When changes to Gantry and/or CB are published to overcome this matter, I'll re-enable MFA (Verification Code via Email). Until then, we'll just admonish users to create a lengthy passphrase or password. (AdminTools is configured to check user passwords to prevent common and otherwise weak entries.)