What happens if you chose allowed instead of required in Horizon? Did you try to access horizon directly or did you go via VMware Identity Manager first?
IHAC that is also see this issue and it is related to the Horizon Sync failing, but when the sync fails it never retires until you resync manually or restart the appliance.
