Frame component (iframe)

Hello,

We are facing an issue when embedding https://xxx.xx into Ignition Perspective using the Inline Frame component (iframe).

Issue description:

  • When opening the quick-login link in a normal browser tab, authentication works successfully.

  • When opening the same link inside an iframe in Ignition Perspective, the system asks for username and password again.

  • Even after entering the username and password, authentication inside the iframe does not work.

Environment:

  • Ignition Perspective

  • Component: Inline Frame / iframe

  • HTTPS

  • Quick-login URL format:
    /api/quick-login/...

Possible cause:
The website may be blocking iframe usage due to browser security policies or HTTP headers.

Please check the following server-side settings:

  1. X-Frame-Options

    • It may be set to DENY or SAMEORIGIN

    • The website should allow being opened inside an iframe from the Ignition domain

  2. Content-Security-Policy

    • Please check the frame-ancestors directive

    • The Ignition Gateway domain should be allowed

  3. Cookie policy

    • Please check cookie settings:
      SameSite=None; Secure

    • Third-party cookies may be blocked inside iframe

  4. Please confirm whether authentication inside an embedded cross-origin iframe is supported.

Additional information:

  • The system works correctly in a normal browser tab.

  • The issue occurs only when it is opened inside an iframe in Ignition Perspective.

Could you please advise whether this system can be allowed to work inside an iframe, and what server-side settings need to be changed?

Ignition doesn't do anything special for IFrames. The ability of a target site to work in an IFrame is entirely under the control of the server supplying the content of the IFrame.

All of Ignition's IFrame settings are for use when Ignition is going to be inside an IFrame of another website.

Your AI-generated answer already provides you the list of things to check in that other webserver. Changes would have to be made in the other webserver, not in Ignition.