How to configure an iFrame

Applies to Infiniti v8.1 or later

 
Infiniti web forms can be embedded in another web page through an iframe HTML tag. An iframe tag requires the target URL to be supplied in the src attribute, as follows:
 
<iframe src="FormUrl" height="heightValue" width="widthValue"></iframe>

Other attributes can be used to configure the iframe’s appearance and functionality, such as presentation of scrollbars. For more information about using the iframe or other HTML tags, refer to W3C documentation http://www.w3.org/TR/html4/present/frames.html or review one of the many tutorials available online.
 

Defining the URL

There are two simple ways to embed Infiniti within your iframe, either embed the portal.aspx page to present to the user a list of available web form or document projects, or embed a link direct to a specific web form or document project.
 

Using portal.aspx

The portal.aspx page renders a list of the available forms depending on the user context. When the user clicks on a form name, a new window opens with the form.
Starting with the URL for Infiniti Produce, simply append ‘/portal.aspx’. For example:
 
<iframe src="http://InfinitiServer/Produce/portal.aspx" width="100%" height="400"></iframe>

 


Using a Direct Link

A direct link presents the target form in the iframe, which is useful when you don’t want users to select from a whole list of forms but are providing a web page dedicated to presenting one specific form.

Starting with the URL for Infiniti Produce, append ‘/wizard/{Form GUID}/’. For example:

 

<iframe src="http://InfinitiServer/Produce/wizard/4d7d2c4f-2b3c-bd17-c7372b8da923" width="100%" height="400"></iframe>

 


 
Configuring Form Appearance
In the above example you can see the form is displayed exactly as it would be if it was launched within the native Infiniti Produce interface, including the navigate pane on the left and the title bar across the top. This may not be a problem, however in most circumstances if you are presenting a specific form to the user you don’t want them to be able to return to the default Produce home page inside the iframe.


To remove the title bar you can append either the ‘?portal=1’ or ‘?portalsave=1’ attributes to the URL query string. Setting the portal attribute simply hides the top bar, thus removing the home and logout buttons. It also automatically removes the ability for logged in users to save an in progress answer file. Setting portalsave instead, has the same effect visually, however enables the save functionality.
 


Depending on the circumstances you may also wish to remove the navigation menu on the left. This is configured in the Publish Options for a published project in Manage, as follows:
 


Simply set the Hide Navigation Pane option.

Security Considerations

You must consider security implications and authentication requirements when configuring an iframe to pass a user into the Produce application. This section takes you through several common authentication scenarios.

Guest/Public Access

If you are running a Guest access account, which has a separate module licence to the core Infiniti product licence, then you may pass users into a public facing form directly without need for any authentication.

Windows Authentication

For internal domain users, when running Infiniti in Windows Authentication mode, there is also no need to consider authentication as this will take place automatically based on the user’s Windows credentials and group membership.

Other Authentication Models

When using the default Forms Authentication mode, users will always be directed to a login page rather than the portal.aspx or direct form page you had configured. In this situation you will need to consider your options and plan a way to authenticate users seamlessly, for example using Single Sign On.
In some cases your site may already manage user accounts, either within the site or using a separate Identity Provider and security tokens such as SAML. Infiniti can support a range of authentication models, including SAML and custom security pass through scenarios. It is worth discussing your options in more detail with an Intelledox consultant to work out the best scenario for you.

P3P Considerations

If you are using a different domain for the Infiniti Produce site than the parent iframe host site, you may need to consider the implications of browsers blocking cookies for ‘cross site’ iframe use. This is not an issue when both your parent website and Intelledox Infiniti share the same domain or host site name.
 
Note: The Platform for Privacy Preferences Project or P3P is a protocol allowing websites to declare their intended use of information they collect about browsing users. It is designed to give users more control of their personal information when browsing. When a website uses P3P, they set up a set of policies that allows them to state their intended uses of personal information that may be gathered from their site visitors. When a user decides to use P3P, they set their own set of policies and state what personal information they will allow to be seen by the sites that they visit.
 

Deploying P3P Privacy Policies

  1. In Internet Information Services (IIS) Manager select the site where Infiniti is installed, usually ‘Default Web Site’, and select HTTP Response Headers from the middle pane (Features View) and double click it.
  2. Click the Add button under the Actions pane
  3. Enter the name and the value as shown in the screen shot
  4. Name: p3p
  5. Value: CP = "CAO PSA OUR"
 

Related Articles

 
 

Keywords

configure iframe web page html contain