Powerbi-docs: x-frame-options error

Created on 27 Feb 2020  Â·  6Comments  Â·  Source: MicrosoftDocs/powerbi-docs

As of the January 2020 update to PBIS the method of embedding reports will not work unless the custom headers property for the server is changed: https://community.powerbi.com/t5/Report-Server/quot-RS-embed-true-quot-command-not-working-in-Sharepoint-2013/td-p/915268

It may be worth noting this on the page. It would have saved me a couple hours of digging!


Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

Pri2 doc-enhancement powerbi-report-servesubsvc powerbsvc product-question

All 6 comments

Thanks for letting us know, @fimiki ! I'll check with the product team and update the article.

Hi, @fimiki -- timely question. You're in luck! This was fixed in the build released today. See https://docs.microsoft.com/en-us/power-bi/report-server/changelog for details.

Wow - perfect! I guess I picked an unlucky time to try and implement this,
but thanks so much for the swift response and fix!

On Tue, Mar 3, 2020 at 11:44 AM Maggie Sparkman notifications@github.com
wrote:

Closed #1885 https://github.com/MicrosoftDocs/powerbi-docs/issues/1885.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/powerbi-docs/issues/1885?email_source=notifications&email_token=AKMC4DNWHZKBI2PWQHMKQOTRFU6W7A5CNFSM4K5CWNF2YY3PNVWWK3TUL52HS4DFWZEXG43VMVCXMZLOORHG65DJMZUWGYLUNFXW5KTDN5WW2ZLOORPWSZGOXBPIVBQ#event-3093203590,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AKMC4DJJOAFSF653YLDHNBTRFU6W7ANCNFSM4K5CWNFQ
.

We have an IIS site which hosts PBIRS and other applications in an iFrame; PBIRS is published via WAP, Login via ADFS.
Unfortunately this fix crashed the embedding on our test servers. The default "Customheader" setting, which works on our production site (Version 1.6.7327.3007, January 2020) is
_

X-Frame-Options (.+)((\/api)|(\/(mobilereport|report|powerbi|excel|pages)\/(.+)(rs:embed=true|rc:toolbar=false))) SAMEORIGIN
_

The setting which will be applied through the update (and/or version from May 2020) is
_

X-Frame-Options (?(?=.api.|.rs:embed=true.|.rc:toolbar=false.)(^((?!(.+)((\/api)|(\/(mobilereport|report|excel|pages|powerbi)\/(.+)(rs:embed=true|rc:toolbar=false)))).$))|(^(?!(http|https):\/\/([^\/]+)\/powerbi.$))) SAMEORIGIN
_

When I use the old setting from our production server on our test server
Our FQDNs (the test servers are public, but accessible only with login data):
PBIRS: https://powerbi-ft.servicebytogether.at/reports
iFrame-hosting Site: https://fachtest.servicebytogether.at/

Login via ADFS is possible, after redirect i get an error:
image

What did go wrong with the update?

Hi, @gerybtiscca -- I checked with the engineers. They recommend opening a support ticket because it may involve a fair amount of back and forth question and answer.
https://powerbi.microsoft.com/en-us/support/
Hope that helps!

Hi Maggie!
Thank you for your info, I’ll open a ticket and let you know when I got feedback!
Gery

Was this page helpful?
0 / 5 - 0 ratings

Related issues

Pacoup picture Pacoup  Â·  5Comments

ShifengWu picture ShifengWu  Â·  6Comments

RealNoArms picture RealNoArms  Â·  3Comments

tolga-balci picture tolga-balci  Â·  3Comments

abhi-debuginside picture abhi-debuginside  Â·  3Comments