<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Thanks for correcting me, Scott. I verified and we are NOT blocking third party cookies in the browser. All cookies are chosen to be allowed. And reg the IDP config, below is how my “idp.properties” looks where we had already overridden the idp.frameoptions and idp.csp properties with null (no value). Isn't this a workaround ? If no, Isn't there any other way to get around ?<div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># X-Frame-Options value, set to DENY or SAMEORIGIN to block framing</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">#idp.frameoptions = DENY</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><b class="">idp.frameoptions</b></span><span style="font-variant-ligatures: no-common-ligatures; color: #000000" class=""> =</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># Content-Security-Policy value, set to match X-Frame-Options default</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">#idp.csp = frame-ancestors 'none';</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(50, 244, 241);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><b class="">idp.csp</b></span><span style="font-variant-ligatures: no-common-ligatures; color: #000000" class=""> =</span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures; color: #000000" class=""><br class=""></span></div><div class=""><font color="#000000" class="">— Prasanna</font></div><div class=""><span style="font-variant-ligatures: no-common-ligatures; color: #000000" class=""><br class=""></span></div><div class=""><br class=""></div><div><blockquote type="cite" class=""><div class="">On Aug 29, 2022, at 7:47 PM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">That's not a cross-oirign issue in the usual sense, it's a "We don't support frames and block them by default" issue, or it's simply down to you blocking third party cookies in your browser.<br class=""><br class="">The idp.frameoptions and idp.csp properties control the headers that block frame handling, and we do not recommend changing them.<br class=""><br class="">-- Scott<br class=""><br class=""><br class=""></div></div></blockquote></div><br class=""></div></body></html>