Service Now nest iframe issues

[Stephen Chan]

   I came across a thread where the Service-Now infinite iframe issue
came up. It sounded like Scott C. had a fix that *should* work, but I
am following up to see if anyone has a deployed and tested solution. I
could grind out out, but if there is a tested script already, I'd
rather use that. This has come up in our ServiceNow deployment and it
would be great to have a known working fixing.

   Thinking about it, would it make sense to just write a JSP page
that is on the servlet container to handle these sorts of things?

   Steve

Re: Speaking of service-now...
Cantor, Scott <canto... at osu.edu>
On 9/14/11 2:37 PM, "Cantor, Scott" <canto... at osu.edu> wrote: >>Where
do you insert your script in the authentication flow?
>You tell it your SSO service is the CGI script, and then you have the >script bust the frame and reattach the query string to your actual SSO >service. It worked with Shibboleth-style requests, I imagine it should >work ok with SAML 2 redirects.
Of course, I should say that my initial script for this was a
prototype just to get it working, and then we didn't go forward with
it. To do it now for real, I'm going to have to try to pull this off
without creating an open relay or XSS nightmare.
-- Scott