Embed Power Page as an Iframe on an external website - Site Settings and HTTP/Content-Security-Policy

[PurdyeS]

Hi All, I have created a Power Pages Website https://myorg-cars.powerappsportals.com

and I want to embed it's homepage as an iframe into a separate External Website https://www.externalwebsite.com.au   (both ficticious names for this post)

How can I do this ? I have found this documentation but cannot get it to work.  

Embed a portal in another website by using an iframe - Power Apps | Microsoft Docs

I receive a 'You are not authorized to access this page' message on the external website where the iframe is.

I'm using a new Power Pages site so I believe I dont have to worry about SameSite mode changes

Any help would be appreciated

[chleverenz · Accepted solution]

Hi @PurdyeS ,

usually, you also have to configure the embedding site for allowing an iframe to be filled from another site. 

So, its not only the embedded site allowing itself to be embedded, its also the embedding site allowing to embed. Usually, this is set via the default-src attribute as far as i remember. The mozilla documentation usally explains it very well: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

Hope this points in the right direction,

  Christian

[PurdyeS]

Thank you very much I think you are right.   As a test I ended up embedding one powerpages site in another powerpages site in a different environment and got it working using settings as above.  However if I switch to the other site it doesnt work, so I think the issue is on the external website side.