Authentication for IFrame

Develop, Build & Integrate APIs & Integrations
1

We try to embed our staff backoffice which has AzureAD/Entra as OAuth2 identity provider implemented. The same provider is configured as SAML SSO for HubSpot. Still, when an Iframe is being loaded on a modal from a CRM-Card, the iframe tries to redirect to login.microsoft.com, which causes an error because it can not be loaded on a framed page.

1. Why is there a redirect when the users Identity is the same as for HubSpot?

2. How can we secure the content of a IFrame at all with this kind of behavior?

Are WebComponents an option to this issue?

2

Hey, @PRößner :waving_hand: Thanks for your questions.

Given the complexity of securing iframes and handling cross-domain authentication between OAuth2 and SAML, this may require a more advanced solution. Due to the technical challenges involved, I’d recommend working with a consultant or dedicated resources familiar with these systems to implement a secure solution. One option is to reach out to a Solutions Partner, but you are welcome to use any technical resource that is a good fit for your needs.

Best,

Jaycee