Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
X-Frame options of IDP prohibits the display of an e-Signature authentication in GlideDialogWindow - Known Error
  • >
  • Knowledge Base
  • >
  • Known Error (Knowledge Base)
  • >
  • X-Frame options of IDP prohibits the display of an e-Signature authentication in GlideDialogWindow
KB0623826

X-Frame options of IDP prohibits the display of an e-Signature authentication in GlideDialogWindow


2828 Views Last updated : Mar 18, 2024 public Copy Permalink
KB Summary by Now Assist

Description

The modal popup window to authenticate an approval fails when SSO is configured for an instance. When the browser is enabled for Developer Tools to evaluate the Javascript console, there is an error message specifying that the x-frame-options has not been configured for the target site.

The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame>, <iframe> or <object>. In order to secure a website from Cross Site Scripting attacks the X-Frame-Options header is applied the value DENY or SAMEORIGIN.

A demonstration of the affect of this can be seen in the video https://www.youtube.com/watch?v=CqzX03X0gsQ&feature=youtu.be


Steps to Reproduce

  1. Activate the e-Signature plugin.
  2. Activate the Multi-Provider SSO Plugin.
  3. Login to the instance via SSO.
  4. Navigate through an approval process.

Workaround

In order to correct this issue the X-Frame-Options header for the site providing your instance, its IDP service must be configured. Since this is a third party action, Service Now can not assist in this. However, there are useful public resources available where cross site scripting attack prevention is discussed extensively. Ref.: https://www.webmasterworld.com/webmaster/4022867.htm


Related Problem: PRB1095939

The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.