Security

Web Portal does not provide a security token for the module to use. Please refer to the Multitenant Access Control Developer Documentation for information on the user login flow.

To embed the module UI in an iframe within Web Portal, the frame-ancestors setting of the CSP needs to be set to Web Portal’s domain.

Example: Content-Security-Policy: frame-ancestors '$PORTAL_DOMAIN';

To ensure high security standards, the module UI must be served from a different origin, such as a different domain or subdomain.