Often times, these issues are caused by unsynchronized clocks or time drift on client devices. Qlik IDP uses time-synchronized two-factor (OTP) authentication provided by the identity vendor. When the OTP fails to verify, there are number of possible causes. See Possible reasons for rejected MFA
Information provided on this condition is given as is at the time of documenting. For up to date information, please review the most recent Release Notes, or contact support at support.qlik.com with the ID QB-4409 for reference.
iOS Devices -
Go to Settings > General > Date & Time. Enable Set Automatically. If this setting was already enabled, you can disable it for a moment, then re-enable.
Android Devices -
Go to Settings > Date & Time. Make sure that the box next to Automatic is checked.
If you use an Android device with Google Authenticator, the app may not be synced correctly. To fix this, launch the Google Authenticator app on your mobile device, tap the Settings option in the main menu, tap Time correction for codes, and tap Sync now.