We have a tight global policy where we block browsers that are more than two weeks out of date. We also use OneLogin as our SAML provider and have it configured to use Duo for 2FA. The Slack application for both Mac and Windows uses an embedded versi...