# OKTA Embedding Apps with OpenId

**URL:** <https://devforum.okta.com/t/okta-embedding-apps-with-openid/11824>\
**Category:** Questions\
**Created:** [November 19, 2020, 4:47pm UTC](https://devforum.okta.com/t/okta-embedding-apps-with-openid/11824 "2020-11-19T16:47:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![paul.loh](https://avatars.discourse-cdn.com/v4/letter/p/c89c15/32.png) [@paul.loh](https://devforum.okta.com/u/paul.loh)\
**Post date:** [November 19, 2020, 4:47pm UTC](https://devforum.okta.com/t/okta-embedding-apps-with-openid/11824/1 "2020-11-19T16:47:48Z")

</div>

I have 2 applications configured with OpenId on Okta.

I intend to embed one app in the other.I understand there is a setting to allow Iframe embedding.  
Okta admin page -\> Customization -\> IFrame Embedding select Allow IFrame embedding

However, this is susceptible to Clickjacking attacks for all the apps on the domain.

Is there a way to do this on an app basis or another more secure way of doing so?

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [November 19, 2020, 5:25pm UTC](https://devforum.okta.com/t/okta-embedding-apps-with-openid/11824/2 "2020-11-19T17:25:43Z")

</div>

At this time, we only support allowing iFrame embedding across the entire org, but we have planned a feature enhancement that will allow you to specify specific apps/domains that are permitted to do so.

You can track the progress of this request in our Ideas portal: [Idea #106403](https://ideas.okta.com/app/#/case/106403)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [February 8, 2024, 7:01pm UTC](https://devforum.okta.com/t/okta-embedding-apps-with-openid/11824/4 "2024-02-08T19:01:14Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.
