Zendesk 'Forbidden Invalid Authenticity Token' Error Message

This article covers will go over the steps to take when you try to access Zendesk and instead receive the 'Forbidden' error message pictured below:

This error in Zendesk is triggered depending on how cookies* are being handled, to resolve this issue you'll need to walk through the following steps.

*Cookies are the extra pieces of information stored by browsers and used in handling user sessions.

Solution Steps:

1. You'll need to enable third-party cookies. For enabling on most common browsers, see here.
   • Steps to enable third-party cookies on chrome
     1. In the top right of your browser, click the three dots and then Settings
     2. At the bottom, click on Advanced.
     3. In the Privacy and Security section, click Site settings
     4. Select Cookies
     5. Uncheck the box next to Block third-party cookies and site data
     6. Alternatively, you can leave “Block third-party cookies and site data” enabled and add "ecompliance.zendesk.com" in the Allow list
2. Clear your browser's cache and cookies. For instructions, see Clear cache and cookies.
3. Retry the request made when the 'Forbidden' error was triggered.

After enabling third-party cookies and clearing cache and cookies, the request should succeed.

If you continue to receive the forbidden message, contact Zendesk customer support.