Duo - 403 Forbidden

Summary

Steps to fix 403 forbidden errors when users access SSO services.

Body

Issue Description

When a user attempts to access a service protected by SSO and Duo, they receive a 403 forbidden error. This issue occurs when the device's time date are out of sync with Duo.

Example

Outlook embedded browser:

403 forbidden message when adding an account in Outlook

Resolution

Windows 10 / Windows 11

Enable Automatic Date & Time Sync

  1. Open Settings
    1. Press Windows + I, or select Start > Settings
  2. Go to Time & Language
  3. Turn ON the following options:
    1. Set time automatically
    2. Set time zone automatically
    3. Windows 11 date and time setting with set time and time zone automatically toggled on
  4. (Recommended) Force a time sync:
    1. Scroll down and click Sync now
    2. You should see a message confirming the last successful sync
  5. Close Settings and retry accessing the service

 

macOS

Enable Automatic Date & Time Sync

  1. Click the Apple menu and select System Settings
  2. Go to General > Date & Time
  3. Enable the following options:
    1. Set time and date automatically
    2. Set time zone automatically using your current location
    3. Mac date & time settings window with set time and date option enabled
  4. If prompted, enter your Mac password to allow changes
  5. Close settings and retry accessing the service

 

Details

Details

Article ID: 630
Created
Thu 2/19/26 10:45 AM
Modified
Wed 2/25/26 12:44 PM

Related Articles

Related Articles (2)

Instructions for setting up the Duo Mobile app
Duo risk-based authentication require more stringent proof of identity for login attempts under questionable circumstances.

Related Services / Offerings

Related Services / Offerings (1)

Extra layer of login protection provided by Duo.