Hello,
We are facing an issue when embedding https://xxx.xx into Ignition Perspective using the Inline Frame component (iframe).
Issue description:
-
When opening the quick-login link in a normal browser tab, authentication works successfully.
-
When opening the same link inside an iframe in Ignition Perspective, the system asks for username and password again.
-
Even after entering the username and password, authentication inside the iframe does not work.
Environment:
-
Ignition Perspective
-
Component: Inline Frame / iframe
-
HTTPS
-
Quick-login URL format:
/api/quick-login/...
Possible cause:
The website may be blocking iframe usage due to browser security policies or HTTP headers.
Please check the following server-side settings:
-
X-Frame-Options-
It may be set to
DENYorSAMEORIGIN -
The website should allow being opened inside an iframe from the Ignition domain
-
-
Content-Security-Policy-
Please check the
frame-ancestorsdirective -
The Ignition Gateway domain should be allowed
-
-
Cookie policy
-
Please check cookie settings:
SameSite=None; Secure -
Third-party cookies may be blocked inside iframe
-
-
Please confirm whether authentication inside an embedded cross-origin iframe is supported.
Additional information:
-
The system works correctly in a normal browser tab.
-
The issue occurs only when it is opened inside an iframe in Ignition Perspective.
Could you please advise whether this system can be allowed to work inside an iframe, and what server-side settings need to be changed?