# Iframe xframe issues, not authenticating

**URL:** <https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752>\
**Category:** Ignition\
**Created:** [November 18, 2020, 7:30am UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752 "2020-11-18T07:30:23Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [November 18, 2020, 7:30am UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/1 "2020-11-18T07:30:23Z")

</div>

Hi all,

We are trying to open a Perspective session within a browser based MES system.  
After disabling x-frame the session starts but stops at Authenticating …

SAMEORIGIN does not work  
Allow-From makes the Gateway not start.

The MES system prefer Internet Explorer 11.

Any ideas, please?

 ![xframe](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/3/03be5cef485a8e6c4e83bc5bf804e22cf242c241.jpeg)

---

<div class="post-metadata">

**Author:** ![Kevin.Collins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.collins/32/13497_2.png) [@Kevin.Collins](https://forum.inductiveautomation.com/u/Kevin.Collins)\
**Post date:** [November 18, 2020, 3:26pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/2 "2020-11-18T15:26:21Z")

</div>

I’m guessing that the space in that additional argument might be causing an issue. Try using double-quotes for the value, e.g.:

```auto
wrapper.java.additional.3=-Dignition.http.header.x_frame_options.value="ALLOW-FROM http://10.26.26.60/"

```

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 18, 2020, 3:32pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/3 "2020-11-18T15:32:57Z")

</div>

In addition to the issue pointed out by @Kevin.Collins I think you may also have a problem using IE11, which is not supported by Perspective.

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [November 18, 2020, 6:10pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/4 "2020-11-18T18:10:56Z")

</div>

Thanks, will try again tomorrow. We tested with chrome as well.

Bit unsure if allow-from is supported by chrome?

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [November 19, 2020, 8:06am UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/5 "2020-11-19T08:06:35Z")

</div>

Hi,

Using ALLOW-FROM as suggested by Mr. Collins does not get us any further.

Opening the Perspective project as a own tab in the same Chrome browser goes straight in. Its public.

Opening the Perspective project inside the MES frames, its just trying to authenticate over and over.

 ![auth](https://us1.discourse-cdn.com/inductiveautomation/original/3X/e/b/eb06b396f830e6fde2303663bf85160d6ef6568d.jpeg)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [November 19, 2020, 1:00pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/6 "2020-11-19T13:00:03Z")

</div>

Are you using Ignition’s built-in IdP ? If not, you will also need your Identity Provider to change their Content Security Policy.

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [November 19, 2020, 1:12pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/7 "2020-11-19T13:12:38Z")

</div>

We’re using the built in idP. Any more ideas? 😃

Will call support when they open in an hour.

---

<div class="post-metadata">

**Author:** ![Adekunle\_Bakare](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@Adekunle\_Bakare](https://forum.inductiveautomation.com/u/Adekunle_Bakare)\
**Post date:** [November 22, 2022, 5:14pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/8 "2022-11-22T17:14:03Z")

</div>

I am currently having this problem. It keeps authenticating on the MES screen. How did you resolve this?

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [November 22, 2022, 5:26pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/9 "2022-11-22T17:26:49Z")

</div>

Replaced the MES with Ignition. 😁

---

<div class="post-metadata">

**Author:** ![Adekunle\_Bakare](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@Adekunle\_Bakare](https://forum.inductiveautomation.com/u/Adekunle_Bakare)\
**Post date:** [November 22, 2022, 5:34pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/10 "2022-11-22T17:34:11Z")

</div>

Did you mean it won't work? We have the MES covering 80% of the screen and we want the ignition to cover the remaining 20%

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [November 22, 2022, 5:45pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/11 "2022-11-22T17:45:40Z")

</div>

You will have to run older versions of your browser or somethink like that. Its a security issue.

---

<div class="post-metadata">

**Author:** ![Adekunle\_Bakare](https://avatars.discourse-cdn.com/v4/letter/a/e9bcb4/32.png) [@Adekunle\_Bakare](https://forum.inductiveautomation.com/u/Adekunle_Bakare)\
**Post date:** [November 22, 2022, 6:02pm UTC](https://forum.inductiveautomation.com/t/iframe-xframe-issues-not-authenticating/40752/12 "2022-11-22T18:02:10Z")

</div>

okay...thank you
