Genesys Cloud - Developer Community!

 View Only

Sign Up

Back to discussions
Expand all | Collapse all

Web Content Widget Authentication Issue - 'allow-forms permission is not set' in Analytics Workspace -> Dashboards

  • 1.  Web Content Widget Authentication Issue - 'allow-forms permission is not set' in Analytics Workspace -> Dashboards

    Posted 02-16-2026 07:54

    Dear Genesys Community,

    We are attempting to display an HTML page using the Web Content widget in the Analytics Workspace dashboards. After a certain period, the content disappears from the widget. This happens because the authentication session with our Active Directory expires, and the HTML page tries to re-authenticate by redirecting to 'www.our-active-directory-login.com'.

    However, the form submission required for authentication is blocked due to the 'allow-forms' permission not being set in the widget's iframe sandbox settings. The Genesys Cloud developer console shows the following message:

    Blocked form submission to 'www.our-active-directory-login.com' because the form's frame is sandboxed and the 'allow-forms' permission is not set.

    Has anyone else encountered this issue or found a solution? Any advice on how to resolve this would be greatly appreciated.

    Thank you in advance!


    #Integrations

    ------------------------------
    Maarten de Wit
    -
    ------------------------------


  • 2.  RE: Web Content Widget Authentication Issue - 'allow-forms permission is not set' in Analytics Workspace -> Dashboards

    Posted 02-20-2026 17:21

    Hello @Maarten de Wit,

    As far as I understand (big chance I could be wrong) the Web Content widget in Analytics Workspace dashboards does not currently provide configuration options for iframe sandbox settings, including the 'allow-forms' permission.

    iframe sandbox options (including allow-forms, allow-modals, allow-popups, allow-presentation, allow-same-origin, allow-scripts, and allow-downloads) are available for Client App integrations but not for the Web Content widget type used in Analytics Workspace dashboards.

    thus, when configuring a Web Content widget in Analytics Workspace, you can only:

    Enter a Widget Title
    Select Widget Type as Web Content
    Specify the URL (which must be HTTPS and allow being iFramed)
    There is no option to configure iframe sandbox permissions like allow-forms.

    So based on the above, here some workarounds I could think for (have not validated yet):

    1) Alternative Authentication Method: Consider if your HTML page can use an authentication method that doesn't require form submission (e.g., token-based authentication via URL parameters or headers)

    2) Proxy Page: Create an intermediary page on a server you control that handles the Active Directory authentication separately, then displays the content without requiring form submissions within the iframe

    3) Client App Integration: Instead of using the Web Content widget, you might explore creating a Custom Client App integration, which does support iframe sandbox options including allow-forms. However, this would appear in a different location within Genesys Cloud (not in Analytics Workspace dashboards)

    There is always the option to submit the enhancement request on Aha! ideas portal to add iframe sandbox configuration options to the Web Content widget in Analytics Workspace.

    The form blocking you're experiencing is a security restriction by design in the current Web Content widget implementation.

    Let me know if get a chance to try any of the ideas.



    ------------------------------
    Joaquin Garcia Fink
    Senior Customer Success Manager
    Genesys - Employees
    ------------------------------



  • 3.  RE: Web Content Widget Authentication Issue - 'allow-forms permission is not set' in Analytics Workspace -> Dashboards

    Posted 03-03-2026 07:47

    Hello @Joaquin Garcia Fink,

    Thank you for the input! It is good to learn that the widget iframe sandbox settings cannot be configured.

    For now we chose to implement option 3 you suggested as a temporary solution (as it was the easiest in the short term). We will definitely explore the other options as well, as displaying our app (which contains data which we cannot just publish on a public html page) in the dashboard widget has the advantage getting all the info our agents need in one view.

    If we manage to resolve this somehow, I will publish the findings.

    Thank you again!



    ------------------------------
    Maarten de Wit
    -
    ------------------------------

    Original Message


Related Content