Share via

Embeded PowerPoint File from SharePoint on External Site Broken for Users for "Access Denied - Request Access" Screen

Anonymous
2022-07-26T23:40:45+00:00

I believe the following describes a product bug that should be fixed as it breaks user expectations and hampers the benefits for using the feature.

Steps to Reproduce:

  • From PowerPoint Online, copy the embed code for a file to be posted on an external website.
  • For users which do not have access to the file/underlying SharePoint site, on modern browsers when loading the page containing the embedded PowerPoint, they will see a broken IFrame with a message "***.sharepoint.com refused to connect"

Expectation:

  • I would expect that any designated embed code made available to users would only redirect between IFrame/embed accessible content. In this case, the resource was redirecting to the SharePoint "Access Denied/Request Access" page within the IFrame, but that standard page restricts being viewed within an IFrame in it's x-frame-options: sameorigin header. Even if the request access page was designed to restrict being shown in IFrame, the embed code content should handle the error/exception case gracefully and provide an explanation to the user.

Technical Network Exchange Details:

  • From the external website containing the IFrame of the embedded PowerPoint
    • GET from *.sharepoint.com/path_to_document?action=embedview
      • 302 Redirect Response to *.sharepoint.com/some_site_path/AccessDenied.aspx
    • GET from *.sharepoint.com/some_site_path/AccessDenied.aspx
      • 200 OK Status with Content
      • Included Header: x-frame-options: sameorigin
    • X-Frame-Options compels modern web browsers to compare externalsite.com to *.sharepoint.com
      • Domains/origins are not same
      • Prevent further processing of the IFrame
      • Show broken message that "***.sharepoint.com refused to connect"
Microsoft 365 and Office | SharePoint | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2022-07-27T03:07:08+00:00

Hello,

Good day! Thank you for posting to Microsoft Community. We are happy to help you.

First, I would like to convey that when you generate the embed code for the PowerPoint presentations stored in the OneDrive/SharePoint Online, the embed code will be accessed only to the users with the permissions:

However, if a user doesn't have permission to the presentation and tries to view the embed link, he needs to encounter a different error rather than "***.sharepoint.com refused to connect". So, in this situation, this behavior needs to be checked from the backend with the related development team, so I would like to suggest you contact the IT admin of the organization and request them to create a support ticket from Office 365 Admin center to have a further investigation. Reference: Get support - Microsoft 365 admin | Microsoft Docs

As a workaround, if you are willing to use the Anyone with this link to the presentation, so every user can access the presentation, you can generate the Anyone with this link can view and replace the link with the link in the Embed code.

Steps:

  1. Go to the location where the PowerPoint presentation is stored> Select the presentation> Share> Anyone with this link can view> Copy the link.
  2. Generate the Embed code for the PowerPoint presentation> Copy the Embed code and paste it into the Notepad.
  3. In the pasted Embed code in the Notepad, replace the following highlighted part with the copied link (Anyone with this link can view it)

Highlighted part to be replaced with Anyone with this link:

Thanks for your cooperation.

Sincerely,

Mia | Microsoft Community Moderator

***Note: If you're unable to reply to this thread, please ensure that your Email address is verified in the Community Website by clicking on Your Account Name > "My Profile" > "Edit Profile" > Add your Email Address > tick "Receive email notifications" checkbox > click on "Save".***

Was this answer helpful?

1 person found this answer helpful.
0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest