Issue Description
When a user attempts to access a service protected by SSO and Duo, they receive a 403 forbidden error. This issue occurs when the device's time date are out of sync with Duo.
Example
Outlook embedded browser:

Resolution
Windows 10 / Windows 11
Enable Automatic Date & Time Sync
- Open Settings
- Press Windows + I, or select Start > Settings
- Go to Time & Language
- Turn ON the following options:
- Set time automatically
- Set time zone automatically

- (Recommended) Force a time sync:
- Scroll down and click Sync now
- You should see a message confirming the last successful sync
- Close Settings and retry accessing the service
macOS
Enable Automatic Date & Time Sync
- Click the Apple menu and select System Settings
- Go to General > Date & Time
- Enable the following options:
- Set time and date automatically
- Set time zone automatically using your current location

- If prompted, enter your Mac password to allow changes
- Close settings and retry accessing the service