Unable to Log Into SolarWinds Via Embedded IFRAME?

Question

Hi,

We recently followed the instructions to change the web.config file in order to allow us to embed SolarWinds pages on our other internal websites. We can now see the SolarWinds page become embedded, and it presents us with a log in screen. The issue we are facing now is that we cannot log in via that embedded IFRAME. Every time we try to log in, the IFRAME just resets and brings us right back to the same log in screen,and the cycle repeats. Has anyone faced a similar issue before?

Thanks!

k_barton · Answer

Thanks for your quick response. The IFRAME code is about as straightforward as it gets: I enabled console logging on Firefox, and am seeing the below messages logged: Strangely, in Chrome, I see the message "Enable Cookies to login" within the SolarWinds IFRAME. We are not using SAML 2FA, just simply manual AD creds. I have also tried enabling the DirectLink account, and even that didn't work. Regardless, even if it did, we wouldn't want to use that anyway considering its security implications.

adam.beedell · Answer

iframes are bad juju by 2022

You can dodge this problem using the directlink account which is even worse for security

You may want to pull data out via SWIS and render in the HTML element you've got.

Might be worth dropping a sanitized version of the iframe code you're running in here, as well as if you're trying to log in with integrated windows/windows auth/SQL/SAML 2FA