cancel
Showing results for 
Search instead for 
Did you mean: 

Accessing SAP Disclosure Management 10.1 SP03 via iframe

former_member207587
Participant
0 Kudos

Hi,

since we have updated from 10.0 SP05 we can not access SAP DM via iframe anymore (company intranet). In the IIS Manager i've tried to add the x-frame-options, but the website overrides with the "sameorigin" standard, by what the access is denied. How can we change the windows server settings, so that the access is allowed?

All our sap systems are running at linux/maxdb, whereby we lack a bit of MS-knowhow.

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

Hi Sascha,

the x-frame-option is set to sameorigin by the application due to security reasons. So it's not possible to overwrite via a setting in IIS and also not possible to ajust the setting within SAP Disclosure Management Application Server.
To enable SAP Disclosure Management to operate within an iframe you need to run the application in same domain as your corporate portal (e.g. in a sub-domain).

Additionally, following could be helpfull for you:

IE Exceptions

Internet Explorer has two major exceptions when it comes to same origin policy

  • Trust Zones: if both domains are in highly trusted zone e.g, corporate domains, then the same origin limitations are not applied
  • Port: IE doesn't include port into Same Origin components, therefore http://company.com:81/index.html and http://company.com/index.html are considered from same origin and no restrictions are applied.

These exceptions are non-standard and not supported in any other browser but would be helpful if developing an app for Windows RT (or) IE based web application.

Regards

Dimitri