none
FIM R2 SSPR - Headers Configurable? RRS feed

  • Question

  • I know this is a shot in the dark, but any-chance the headers of the R2 SSPR are configurable?

    For instance, I would like to modify or remove the "X-Frame-Options: SAMEORIGIN" header


    Tuesday, April 16, 2013 5:44 PM

All replies

  • I've tried to do that but it was ignored in the headers on IE. Are you trying to embed a SSPR in a iFrame? I didn't succeed on this because of X-Frame being ignored in IE (afair on Chrome it worked) and at the end we have published it in some path like /register through UAG - this was viable option for us. May not work for you.

    Tomek Onyszko, memberOf Predica FIM Team (http://www.predica.pl), IdAM knowledge provider @ http://blog.predica.pl

    Wednesday, April 17, 2013 8:51 AM
  • Are you trying to embed a SSPR in a iFrame? I didn't succeed on this because of X-Frame being ignored in IE (afair on Chrome it worked)

    Yep, I am trying to develop a solution where I can pull up the site from an Iframe without opening or navigating away from the page. I couldn't find any way to alter the header since it's set in code, so I configured a reverse proxy to hide it when serving the pages.

    You would think that they would at least make this configurable in some way?

    Wednesday, April 17, 2013 9:30 PM