Forum Discussion
CA_Valli
MVP
MVPApplying APM on an iframe
Hello everyone, I'm having this issue where APM-protected content fails to start APM session if called from an iFrame. The access session starts at client request time as expected, and I can see t...
So we did some more testing, and this is not going to work.
We've worked with support and experimented with iRules to insert additional headers and cookies into the response, but the behaviour of CORS is that these are always going to be removed. And because APM relies heavily on cookies to function, it does mean that accessing APM-protected content from an iFrame will fail to work.
CA_ValliMVP
MVPHello Jonathan_c
the 'workaround' was disabling APM access for that request via iRule, so that iFrame loads all components.
In our case backend server runs 401 NTLM auth which was originally supported through APM and returns classic auth template when APM is disabled.
Jonathan_c
Cirrus
CirrusThanks 🙂
