function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
G. RoskamsG. Roskams 

disable oauth allow access page

Hi,

Does anyone knows if you can disable the 'Allow access to ' page during the oauth authentication process for communities ?
I have the login procedure in Salesforce, but it is embedded in an Iframe. In the communities site, I disabled already the Clcikjack protection, but that didn't help to solve my problem.

I received the error: Refused to display 'https://a1-myvangansewinkel.cs20.force.com/setup/secur/RemoteAccessAuthoriz…Jc8Z9I9jFVHJO8_9BZlsS7L57ZDGcrYqR-Y_-lEFiRW8DJL2BDUWmJA%3D%3D&display=page' in a frame because it set 'X-Frame-Options' to 'DENY'
 
shelly baier 9shelly baier 9
I'm encountering the exact same problem, did you find a solution by any chance?
Gunther Roskams 38Gunther Roskams 38
Hi Shelly,

In the policies of the connected app, you need to configure the setting 'Permitted Users' to 'Admin approved Users are pre-authorized'. Then it should work
Asher CorenAsher Coren
Thank you Gunther for your reply.
We changed the configuration as per your suggestion, but it is still trying (and failing) to display the apporval window.
What else are we missing?
Asher CorenAsher Coren
To explain our problem: When a user first tries to our connected app, he is asked to allow our app to access his Salesforce information. This authorization page is a Salesforce page (the url is https://eu8.salesforce.com/setup/secur/RemoteAccessAuthorizationPage.apexp?...), but it won’t open since Saleforce opens the connected app in an iFrame, and it returns an X-FRAME-OPTIONS:
DENY header.
What can we do to allow the authroization page to show?
jonathan.wieseljonathan.wiesel
@Asher Did you finally figure it out? Could you please share?