Workfront Queue Embed in Sharepoint - auth.services.adobe.com refused to connect.

[StevenBr4]

Hi all,

I'm trying to embed a request queue in a Sharepoint site - I've added instance.my.workfront.com to the allowed connection list in Sharepoint, and I have also checked the box in System Preferences for "allow embedding of Workfront in an iFrame", but when I add the embed code to the Sharepoint module, I get a gray box and an error of: auth.services.adobe.com refused to connect.

Has anybody run into this before? I only found one instance in the community and it referenced the System Preferences.

Thanks!

[Patrick-antegma · Accepted solution]

Hi @StevenBr4,

You can only submit a request in Workfront if your are authenticated.

The problem ist that your instance is an IMS controlled instance of Workfront which uses auth.services.adobe.com for authentication. However, your are not allowed to use auth.services.adobe.com in an iframe. This is blocked by Adobe for all services and you can't whitelist it.

You have 2 options:

1. You load the embed form in an popup, which is opened by your SharePoint app. auth.services.adobe.com is blocked in iFrame, but not in popups.
2. You use the REST API to submit the requests and use OAuth2/Service2Service for the authentication. Keep in mind OAuth2 authentication has to be opened in the popup again as it uses auth.services.adobe.com. And you have to think about how can load all the form data via REST API or you have to hard code the form.

Hope this helps.

Patrick

[StevenBr4]

Thanks Patrick! Would this be any different if we used SSO vs IMS?

[Patrick-antegma]

Hi @StevenBr4,

No. If you have an IMS enabled Workfront instance, SSO is handled via IMS. Old SAML authentication in Workfront is disabled by Adobe and can't be activated.

The SSO (Azure, Okta, SAML, OAuth2) is configured per company email domain. To enter your email address, Adobe is forwarding you to login screen auth.services.adobe.com.

=> Activating SSO doesn't help you in this situation.

We have build similar integrations for other platforms like Hootsuite.

[Patrick-antegma]

I want to say that we build similar Workfront integration and run into these problems too. 🙂