<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
How to Redirect to the End User Settings or Embed the Page in an IFrame
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This article aims to instruct admins on how to embed only the end-user settings component in an iFrame or to use it in a redirect flow. Purposes may include using the password change flow, allowing users to edit their profile, or enrolling MFA from within a custom application without configuring API calls, etc.

NOTE: This is not compatible with End User Settings Version 2.0.
Applies To
  • IFrame embedding
  • Redirect
  • End-user settings
Cause

If the navigation elements (such as the side-nav and the top menu bar) are not a concern, the https://<subdomain>.okta.com/enduser/settings can be safely used for iFrame or redirect embedding.

If the navigation elements need to be hidden, then admins should use the following URL:

https://<subdomain>.okta.com/enduser/settings?iframe=true&iframeControlHideAll=true


Personal information 

Solution

Depending on the use case and circumstances, it may be necessary to use either an <iframe> or an <a> element in their application page structure:

  • If iFrame: <iframe src="https://<subdomain>.okta.com/enduser/settings?iframe=true&iframeControlHideAll=true" />
  • If redirect: <a href="https://<subdomain>.okta.com/enduser/settings?iframe=true&iframeControlHideAll=true">Link text here</a>
End-user settings embedded in iFrame
Using this URL will ensure that the end-users only have access to this page and cannot navigate to the end-user dashboard intuitively, in case admins desire to impose this limitation in their flow. If this is not a concern, the https://<subdomain>.okta.com/enduser/settings URL can be used instead.
Loading
How to Redirect to the End User Settings or Embed the Page in an IFrame