You may encounter this error if you’ve configured Tableau Server for trusted authentication.
The client web browser IP address is not considered by default when redeeming the ticket. If Tableau Server is configured to enforce client IP address matching, make sure that the client's web browser IP address that is sent in the POST to Tableau Server is the same as when the browser tries to retrieve the embedded view. For example, in the Trusted Authentication diagram, if the POST request in step 3 sends the parameter client_ip=74.125.19.147, then the GET request in step 5 must come from that same IP address.
See Optional: Configuring Client IP Matching to learn how to configure Tableau Server to enforce client IP address matching.