@richard67 Can you please assign this issue to me?

@galamarco I tried reproducing your issue, unsuccessfully.

First attempt:

• I installed a new Joomla 4.2 site using the latest development build.
• I created a new Registered user.
• I set Show Onboarding to Yes and added Registered to the Disable Multi-factor Authentication.
• I logged into the frontend.

Observable results:

• I am not asked to use MFA, nor am I shown the onboarding.
• Editing my user's profile I cannot set up MFA.

Second attempt:

• I installed a new Joomla 4.2 site using the latest development build.
• I created a new Registered user.
• I logged in with the Registered user and set up MFA. Then, I logged out.
• In the backend I set Show Onboarding to Yes and added Registered to the Disable Multi-factor Authentication.
• I logged into the frontend.

Observable results:

• I am not asked to use MFA, nor am I shown the onboarding.
• Editing my user's profile I cannot set up or modify MFA; I can only disable MFA (as I should).

Third attempt:

On this site I then enabled the System - Privacy Consent plugin.

I logged back into the frontend. Again, I am not asked for MFA but I am asked for my privacy consent. Saving it I am not asked for MFA. Navigating elsewhere on the page does not ask me for MFA.

Fourth attempt:

I invalidated the user's consent from the backend. Again, I logged back into the frontend. Again, I am not asked for MFA but I am asked for my privacy consent. Saving it I am not asked for MFA. Navigating elsewhere on the page does not ask me for MFA.

At this point I do not think that the reproduction instructions are accurate or that the issue is observable.

Please double check that the user you have a problem with is actually assigned directly to the Registered user group. If it belongs to a sub-group of the Registered group they will not be exempt from MFA. The exemption only applies to users belonging directly to the groups you have listed in the configuration.

Otherwise, please provide additional information on how we can reproduce this issue on a new installation.

@richard67 Can you please label this as information required?

Since we didn't get a response for 4 months, I'm closing this issue.