OWA Web Parts not working in 2013 - "This content cannot be displayed in a frame"

A while back in 2013 (Cumulative Update 2) there was a change which causes a header called X-Frame-Options to be inserted into rendered OWA pages.  This header tells browsers to not render content in an iFrame.  This is a security feature which is meant to help prevent click-jacking. There is a WebPartsFrameOptionsType setting on VDIR/MailboxPolicy, which…

0

OWA Single-sign-on support

OWA 2010 and prior is considered non-extensible as far as Microsoft is concerned in the area of doing single-sign-on programmatically.  The exception to this would be when a person is in-network and uses their existing network credentials to access OWA through Windows Authentication.  Please understand that while there are some ways people have been working…

1

OWA Web Part in an iFrame sample

I have not seen any examples of using OWA parts in an iFrame.  However, I wrote such a sample recently and wanted to share it. The full OWA UI in an iFrame is not supported and its expected that doing so may fail at any given point and at different points depending upon the service…

2