Options
  • State Suggested Answer
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 12 subscribers
  • Views 39 views
  • Users 0 members are here
Related

Allowing M-Files Cloud Web Access in an Iframe

elisheva

Hi everyone,

I am developing an external web application where I need to embed the M-Files Web Access (vNext) inside an <iframe>. Our vault is hosted on the M-Files Cloud (via a partner, ADMS).

I am currently facing security blocks preventing the iframe from loading. When trying to load the vault URL (https://adms.mfs.cloud/...) inside my iframe, I get the following error in the browser console: Refused to display '...' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

My Setup:

  1. Host Page: A simple HTML page running on localhost (for dev) and eventually a specific domain.

  2. Target: M-Files Cloud Web Access.

The Issue: Since this is a Cloud environment, I do not have access to the IIS settings to remove the X-Frame-Options header or configure the Content Security Policy (CSP) manually.

My Questions:

  1. Is there a specific setting within M-Files Admin (Configurations > Advanced Vault Settings) where I can configure the allowed Frame-Ancestors or whitelist my domain for iframe embedding?

  2. If this must be done by the Cloud Service Provider (ADMS in my case), what is the specific technical request I should make? Is it a change in the appsettings.json, a specific registry key, or an IIS configuration on their end?

Thanks in advance!

  • 0

    Embedding M‑Files Web inside another application via an iframe is not officially supported. While it may technically work to some extent in certain scenarios, we don’t provide any guidance for setting it up, nor can we support issues that might result from using M-Files this way.

    If you still choose to experiment, you can examine the options under Advanced Vault Settings > M‑Files Add‑In Settings, which may influence how embedding behaves. However, please proceed with caution and be aware that this approach is unsupported and may lead to unpredictable behavior.

M-Files
M-Files Support


© 2025 M-Files, All Rights Reserved.