
JonathanW.22447 (Customer) asked a question.
okta-signin-widget seems to always fail when running from within an iframe using a SPA
I always am getting the cross domain error when running from within an iFrame. The same code running from the top level frame (by loading the Iframe in the browser), does not get the coors error.

Hi @JonathanW.22447 (Customer) ,
Please make sure the following setting is enabled:
Admin UI: Settings -> Customization -> IFrame Embedding Allow IFrame embedding
This should be checked to allow iFrame embedding.
Also make sure the URL is added a trusted origin for CORS in Okta (https://developer.okta.com/docs/guides/enable-cors/granting-cors/).
Thank you