MB-R311
Time-based one-time passwords (TOTPs) are checked based on a time source from a trusted service and not from an untrusted or client provided time.