Topics Map > Multi-Factor Authentication (MFA)

MFA-Duo - Duo Prompt Display Issues

This document describes some Duo prompt issues that may occur and troubleshooting steps to solve them.

Scenario 1

Users may be presented with a "Login Expired" error message or a "403: Forbidden" error message as shown in the screenshot below:

403 Forbidden error

RESOLUTION:

Have the user check and make sure that their time zone/clock settings are set automatically on their device.

iOS

  1. Navigate to Settings > General > Date & Time and make sure "Set Automatically" is toggled on.

Mac OS

  1. Navigate to the Apple Menu > System Settings > General (in the sidebar) > Date & Time and turn on "Set time and date automatically."

Windows 10

  1. To set your time and time zone in Windows 10, go to Start  > Settings  > Time & language > Date & time and make sure you have the correct time zone set for your current location.

Scenario 2

Users may be presented with the error "This site can't be reached" and in some other cases may only see a blank screen.

Note: This information can be found at https://help.duo.com/s/article/3710?language=en_US

RESOLUTION:

  • Make sure that JavaScript is enabled in Safari on your macOS or iOS device. 
  • Disable content restrictions on the device. The instructions are described below for different versions of iOS or macOS.

iOS 12 or Newer

  1. Navigate to Settings > Screen Time > Content & Privacy Restrictions > Content Restrictions > Web Content.

  2. Uncheck Limit Adult Websites to completely disable content restrictions.

    Note: If you do not want to fully disable restrictions, you can add duosecurity.com at the bottom of the "Allowed Websites Only" list.

iOS 11 or Older

  1. Go to Settings > General > Restrictions > Websites.

  2. Uncheck Limit Adult Content to disable all content restrictions.

Mac OS 10.15 (Catalina) or Newer

  1. Open System Preferences.

  2. Navigate to Screen Time > Preferences > Content & Privacy.

  3. Set any Web Content restrictions to Unrestricted Access.

    Note: If you do not want to fully disable content restrictions, you can add duosecurity.com in the "Customize" section of the "Allowed Websites Only" option.



Keywords:
content adult restriction block settings box blank missing iphone safari does not fit cant can't see authentication push enter passcode tablet ipad iphone not showing 403 forbidden error date time login expired 
Doc ID:
98163
Owned by:
MST Support in Identity and Access Management
Created:
2020-02-21
Updated:
2024-09-16
Sites:
DoIT Help Desk, Identity and Access Management