We'd like to inform you of specific constraints that impede the integration of SharePoint pages within LMS365. This article explains the reasons behind this challenge and proposes alternative approaches for content integration.
Root cause: the X-FRAME-OPTIONS property
According to an official Microsoft article, the inability to load SharePoint pages within an iFrame from a different domain is an intentional design feature. This occurs because the HTTP header property X-FRAME-OPTIONS is set to the value SAMEORIGIN.
This security measure prevents the pages from different domains being loaded, thereby hindering the embedding of SharePoint pages into external systems such as LMS365. Our player is loaded from a different domain, namely *.365.systems, so the page can't be embedded.
For more information, see the following Microsoft articles:
Specific website settings
Our Help Center article already highlights an issue with the Website link learning module item in LMS365.
External websites, including Microsoft resources, such as sharepoint.com, and learn.microsoft.com (which is used in some Microsoft Learning Pathways articles), may have settings that prevent their content from being embedded within an iFrame. This restriction is imposed by the website owners themselves and is beyond the control of LMS365 admins.
You can check whether you can see the page that you want to embed using one of the services mentioned in our Help Center article. If it isn't shown there, then it can’t be shown in the LMS365 player either, because we've always used the same implementation for showing content.
Recommendations and workarounds
While embedding SharePoint pages directly into LMS365 isn't feasible because of these limitations, alternative solutions are available.
- Use embeddable content from resources that provide their own embed codes, such as Microsoft Sway, Microsoft Forms, YouTube, etc.
- Configure content that can't be embedded to open in a new window, using the specific toggle of the Website link learning module item. This approach ensures seamless access to external resources.
Moreover, we understand the challenges faced by our customers in adapting to these limitations.
So, we're committed to providing support by:
- Assisting with the bulk update of learning items, if necessary, to ensure a smoother transition to recommended practices.
- Providing a feature that can be enabled on your tenant. This feature will enable you to open SharePoint pages not in new tabs, but in a new page-centered pop-up window, ensuring a better user experience.
Here is an example of how the implemented feature will be displayed in the LMS365 player. Make sure that pop-ups from lms.365.systems are allowed in your browsers.
If you have further inquiries or concerns, or if you'd like assistance with bulk updating learning modules or enabling the new feature, please don't hesitate to reach out to the LMS365 Support team.