2912358 - XSUAA login page gets blocked in iframes - SAP BTP Cloud Foundry

• A Cloud Foundry application is embedded in an iframe. One example is the integration into the SAP Launchpad Service.
• When opening the application, it gets blocked by the browser with the message: <subdomain>.authentication.<region>.hana.ondemand.com refused to connect
• In the browser console, the following error is logged:  Refused to display <URL> in a frame because it set 'X-Frame-Options' to 'deny'.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP BTP, Cloud Foundry environment

cf uaa xs uaa Customer 360 mashup c4c header Refused to display in a frame because it set 'X-Frame-Options' to 'deny', refused to connect, x-content-security-policy, tile, logon, Invalid domain(s) provided or missing protocol, BTP, Feature Set B, BTP Cockpit, Trust Management, Authorization, Cloud Foundry, CF , KBA , scp , sap cloud platform , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , How To