My requirement is to embed OAS dashboard in an iFrame on a web page hosted on a different subdomain. OAS version - 2024. Currently the dashboard is not loading and giving error: -Refused to display 'https://oas.xyz.com/' in a frame because it set 'X-Frame-Options' to 'deny'. Does OAS have any security setting where I can modify the frame options/frame ancestors settings?

Is the page doing the embedding behind something? F5, proxy or anything else? Because if yes, the domain you add in OAS could maybe be that one, not the F5 or proxy etc. Or maybe all of them, as in theory the embedding is done by the browser that sees those sites at their “public” address (not fully sure with such a complexity). All the layers add complexity, making debugging quite annoying and not so simple.

In OAS SSO is managed fully outside OAS, by your OHS (or any other proxy you have in front). Therefore you can look at how to set that header in your OHS config, you should have a place where you handle the SSO piece and then proxy to OAS.

Thanks @Gianni Ceresa. This is working after adding Content-Security-Policy: frame-ancestors, in OHS httpd.conf.

Oracle Analytics Named a Leader in the 2025 Gartner® Magic Quadrant™ Oracle Analytics whas been recognized as a Leader in the 2025 Gartner Magic Quadrant for Analytics and BI Platform
Oracle Analytics New Product Roadmap June 2025 Oracle Analytics June '25 roadmap: OAC & FDI updates, fresh look, enhanced features.
Join the Oracle Analytics & AI Community Happy Hour at Oracle AI World! Secure your spot for a limited-seating, private happy hour at Oracle AI World to network with peers and Oracle experts!

Oracle Analytics Cloud and Server

Embedding OAS Dashboard in an iFrame on another subdomain

Accepted answer

400

Views

Comments

Answers

Mike Durran-Oracle Mod

Jul 30, 2024 11:32AM

Could your authentication provider be blocking the login screen appearing in the iFrame? This is quite common.

0

MFA for Oracle Community

Oracle Analytics Cloud and Server

Categories

Embedding OAS Dashboard in an iFrame on another subdomain

Answers