Skip Navigation

Search

Error with OIA interview in BUI workspace (frame is denied by "X-Frame-Options" directive set to "sameorigin")
Answer ID 13090   |   Last Review Date 12/05/2025

Why am I receiving an error trying to use a Customer Portal page containing an Intelligent Advisor interview within a BUI workspace browser control?

Environment:

Intelligent Advisor (OIA), Browser User Interface (BUI), Customer Portal (CP)
 
Issue:

An x-frame-options related error is occurring when trying to use an Intelligent Advisor (OIA) interview in BUI workspace. The error indicates frame is denied by "X-Frame-Options" directive set to "sameorigin".
 
Resolution:
 
The error indicates that the X-Frame-Directives security header is set to "sameorigin". This is the default configuration on any new Oracle B2C Service site, and the recommended solution is to grant access using Content-Security-Policy in Custom VHost Directives (Virtual Host Controls for the interface). This can be accomplished by adding the following configuration.
 
Header set Content-Security-Policy "frame ancestors 'self' https://[interface domain here];"
 

Custom VHost Directives can be modified through an SR to Oracle B2C Service Support.