Expand my Community achievements bar.

AEM won't allow Azure AD login?

Avatar

Level 2

So the problem is I have an AEM page that should be able to be my unified login page for Azure AD. Basically this allows Microsoft to just inject into this tag <div id="api" data-name="Unified" style="">.

The problem I believe is that AEM is configured such that it sees that as an XSS attack.  I'm not sure however how I would allow one URL through that rule, I don't think this is at the AntiSammy level, it seems like a URL rule not a content rule. Anyone have any thoughts/Advice on this situation?

3 Replies

Avatar

Level 10

I have never seen a doc on this use case. If community does not provide an answer - i recommend opening a support ticket.

Avatar

Level 9

Are you using HTL in your development? if yes, then you can set @context = 'html' and try also there are other context which could help you.

Regards,

Jitendra

Avatar

Level 2

Jitendra, No we are using sightly. But your theory is that it is something related to that page at a template level that would prevent it?