Adding an Embed webpart to SharePoint

Question

I get the following error for every option I attempt to embed a Google Calendar in my SharePoint, even when I change the setting to: Allow contributors to insert iframes from any domain.

Embedding content from this website isn't allowed, but your admin can change this setting.

Answer 1

Dear @Jennifer May-Dennis,

I understand how frustrating this can be, especially since you’ve already enabled the setting to allow iframes from any domain. To help narrow this down and identify whether the issue is coming from SharePoint configuration or the Google Calendar itself, I’d like to ask a few targeted questions.

• Can you confirm exactly what you are pasting into the Embed web part? Are you using the full iframe embed code from Google Calendar settings, or just a regular calendar URL?
• Can you check if your site has custom scripting enabled or disabled?
• Is the Google Calendar you’re trying to embed publicly accessible, or is it restricted to users in your Google Workspace domain? If possible, try opening it in an incognito browser, does it still display?

In SharePoint Online, the “Embedding content from this website isn’t allowed” message appears whenever the platform cannot safely render the external content. In this scenario, there are two main causes to consider.

First, the domain you are embedding must be explicitly allowed at the site collection level. Even if “Allow contributors to insert iframes from any domain” is selected, it is still recommended to add the exact domains used by the Google Calendar embed (for example, calendar.google.com and www.google.com) in the HTML Field Security allow list and then republish the page.

For more information, please refer to: Allow or restrict the ability to embed content on SharePoint pages

Moreover, if you are using link but a link doesn't work, try using the embed code instead. Embed code is a list of specific instructions from a website that describe how to display that content on another page. Many sites offer embed codes on their pages for you to copy and paste. You'll typically see a button labeled Embed code or </>. This opens a text box with some code in it.

For more information, please refer to: Add a calendar to your website - Google Calendar Help (Disclaimer: This link is shared by community members for your convenience. It points to a third-party site that is not managed or verified by Microsoft. We can’t guarantee the quality, safety, or suitability of any content or software found there. Please review carefully and make sure you understand any potential risks before using it)

Here are some steps I recommend you try again:

Step 1: Open your Google Calendar > On the upper right, click the Settings icon > Select the Settings option

Step 2: Scroll down and select a calendar you want to embed > On the dropdown of options, select the Integrate calendar button > Copy the embed code of your Google calendar.

Step 3: Add Google Calendar to your Sharepoint website.

For more information, please refer to these articles: Add content to your page using the Embed web part and How to embed Google Calendar on your Sharepoint website (Disclaimer: This link is shared by community members for your convenience. It points to a third-party site that is not managed or verified by Microsoft. We can’t guarantee the quality, safety, or suitability of any content or software found there. Please review carefully and make sure you understand any potential risks before using it)

• Go to your Sharepoint site and log in with your credentials > Locate the page that you want to edit or create a new blank page. If you are creating a new page, click the "New" button and select "Page" from the options > On the upper right corner of the page, click the "Edit" button. This will enable you to make changes to the page.

• Hover over the area where you want to add the calendar, then click the "+" icon that appears. From the list of options, find the "Embed" or "<>" icon and click on it.

• Paste the embed code provided by Google into the box > Click the "Publish" or "Republish" button to save your changes and make them live on the site.

Note: Please understand that as a forum moderator, my role is to provide general guidance and troubleshooting support. I don’t have access to internal systems or backend tools, and I appreciate your understanding of these limits.

I hope the information shared helps point you in the right direction. Please try the steps above and let me know if they work. If not, we can continue working together to narrow this down.

The first response may not always resolve the issue right away, but with your help and more details, we can work toward a solution.

Thank you for your patience and understanding. I'm looking forward for your reply.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

The error occurs because SharePoint only allows embedding from domains that are permitted in the site collection’s HTML Field Security settings, and the Google Calendar domain must be on that allowed list. Changing to “Allow contributors to insert iframes from any domain” may not take effect in all cases, especially when custom scripting is turned off.

Use these steps at the root site of the site collection (requires site collection admin):

1. Go to the root SharePoint site of the site collection where the page lives.
2. Select Settings → Site settings (or Site information → View all site settings).
3. Under Site Collection Administration, select HTML Field Security.
4. Choose one of these options:
   • Preferably: Allow contributors to insert iframes only from the following domains, and ensure the Google domains used by the calendar (for example, calendar.google.com and www.google.com) are listed.
   • Or (less secure): Allow contributors to insert iframes from any domain.
5. Select OK to save.

Notes and checks:

• SharePoint maintains a default list of safe domains. Microsoft 365 has already added calendar.google.com and www.google.com to this default list for modern pages. If the HTML Field Security list was customized previously, those entries may be missing and must be added manually.
• If custom scripting is turned off for the site, the “Allow contributors to insert iframes from any domain” option applies only to the Embed web part. Other HTML fields will still be restricted to the explicit allowed-domain list.
• Ensure the Google Calendar embed code is iframe-based (starts and ends with <iframe> tags) and uses HTTPS, because script-based or non-HTTPS embeds are blocked.

After updating HTML Field Security and confirming the embed code is an HTTPS iframe, re-add the Google Calendar using the Embed web part. The “Embedding content from this website isn’t allowed” message should no longer appear if the calendar’s domains are correctly listed.

---

References:

• Allow or restrict the ability to embed content on SharePoint pages
• Add content to your page using the Embed web part
• Content Embed web part experience improved
• Add content to a SharePoint space with the Embed web part