What domain do I specify in my CSP headers for teams?

SadPython 0

I'm trying to allow a page on my web app to be iframed by teams. However, I'm not sure which domain to whitelist for the teams client. How can I find this?

Nivedipa-MSFT 2,896 Reputation points Microsoft Vendor

2024-07-01T05:45:56.59+00:00

@SadPython - Thanks for reporting your issue. We will check this and update you soon.

1 answer

Nivedipa-MSFT 2,896 Reputation points Microsoft Vendor

2024-07-01T06:01:19.2733333+00:00

@SadPython - You need to specify the domain *.cloud.microsoft in your CSP headers to allow a page on your web app to be iframed by teams

Ref Doc: https://learn.microsoft.com/en-us/microsoftteams/platform/tabs/how-to/tab-requirements
Please sign in to rate this answer.
SadPython 0 Reputation points

2024-07-02T22:32:44.8333333+00:00

But I am still seeing this issue here:

Any idea what I'm missing? You can see I've added the domain to my CSP frame ancestors

Nivedipa-MSFT 2,896 Reputation points Microsoft Vendor

2024-07-03T06:42:50.18+00:00

Could you please track this issue here: https://learn.microsoft.com/en-us/answers/questions/1791872/frame-ancestor-violation-in-teams-tab-app
Sign in to comment

Share via

What domain do I specify in my CSP headers for teams?

1 answer