Why am I getting "session expired" errors from embedded URLs?

Created by Mark Eves, Modified on Thu, 7 Mar at 10:54 AM by Ben Hayes

The system allows you to embed URLs from your organisation's instance onto your organisation's website, through the use of iframes.


If you are experiencing the following error message when trying to access your instance through this method, it could be an issue with your X-Frame-Options. This is something that your IT department should be more familiar with, and it is recommended that they carry out the changes needed.


Web browsers come with the ability to inspect the elements on a web page. This can usually be done by right-clicking on the web page, and selecting "Inspect".


Something similar to the following should appear on the screen. Click on the "Network" option at the top, and refresh the web page so that the performance can be recorded.


Proceed to carry out the exact steps you performed to encounter the "session expired" error. Once the error appears, under "Headers" within the inspection, scroll down until you see "X-Frame-Options".


If they are set as "SAMEORIGIN", this is incorrect.


Please ask your IT department to change this server parameter to the following:


X-Frame-Options: allow-from *


This should resolve the problem.


 

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article