
fys1u (fys1u) asked a question.
I have 2 applications configured with OpenId on Okta.
I intend to embed one app in the other using an IFrame.
I understand there is a setting to allow Iframe embedding.
Okta admin page -> Customization -> IFrame Embedding select Allow IFrame embedding
However, this is susceptible to Clickjacking attacks for all the apps on the domain.
Is there a way to do this on an app basis or another more secure way of doing so? Could I use the Okta sign in widget twice in my app for React?

In order for us to give you the best answer, please open a case with us through an email to developers@okta.com. Please provide all the details regarding the use-case and the full scenario for the implementation. Thank you.