Symptom
For some days our embedded Signavio workspace cannot be opened anymore in our intranet. Depending on the browser, we are seeing one of the following error messages:
Chrome:
editor.signavio.com refused to connect.
Firefox:
To protect your security, editor.signavio.com will not allow Firefox to display the page if another site has embedded it.
Environment
SAP Signavio Process Manager 3.0
Cause
We implemented a security patch to increase the security of our platform against Clickjacking. Clickjacking is a malicious technique of tricking a user into clicking on something different from what the user perceives, which can be become possible by embedding and overlaying an application like Signavio into a third party web page.
Resolution
To achieve embedding you have to use one of the following additional parameters in your embedded URL:
- usp=sharing
- t=<workspace ID> (Replace the placeholder <workspace ID> with the workspace ID of your tenant. You can find the workspace ID in Process Manager Explorer - Help - Workspace information)
Below you can find two examples, how your embedded Signavio page is working again:
- https://editor.signavio.com/intralink/portal#model/<DiagramID>?usp=sharing
- https.//editor.signavio.com/intralink/portal?t=<workspace ID>
Keywords
process, manager, embed, workspace, intranet, internal, refused, connect, editor, protect, security , KBA , BPI-SIG-HUB , SAP Signavio Process Collaboration Hub , Problem
Product
Attachments
image2021-1-21_12-48-54.png |
image2021-1-21_12-49-17.png |