Forum Discussion

ErinMasson's avatar
ErinMasson
Community Member
3 years ago

Embedding docs from sharepoint into Rise 360 embed block

I want to embed PDF/word docs that are housed in sharepoint into a Rise 360 embed block - I have searched through the threads and haven't found any related articles.

When I try to embed, I get an error message saying that my company's sharepoint refuses to connect. Our IT department have investigated and determined that the embed of documents (even with public access ie. "anyone with link can edit") is forbidden by the Content Security Policy Directive "Frame-Ancestors" and that Microsoft will only allow documents served from Sharepoint to be directly embedded on other Microsoft Product Sites.

There is no error with the embed code as it works when embedded in Microsoft products (such as Sway).  I've also tried using the "embed from web" option on other interactive blocks such as accordion but it prompts the user to log into their microsoft account even though the link is public ("anyone can edit").

OneDrive for Business does not allow you to generate embed codes but you can with a personal account (go figure?!). I have tested this and embeds can be seen in Articulate if the embed code is generated from a OD personal account. But we're looking for a workaround that will allow us to keep document assets inside our sharepoint network. Thanks

  • KarlMuller's avatar
    KarlMuller
    Community Member

    Hi Erin,

    If your IT department has already determined that the embedding of documents within Rise courses is forbidden by a SharePoint Content Security Policy Directive, I'm not sure what you are asking. 

    • ErinMasson's avatar
      ErinMasson
      Community Member

      I'm asking if there's an alternative! I assumed the policy directive was not just confined to my organisation but Microsoft products generally so how do other people embed PDF's if Sharepoint (or OneDrive for business) is not an option? Surely others have the need to embed docs in Rise? If so, I want to know how you do it :)

      • KarlMuller's avatar
        KarlMuller
        Community Member

        Hi Erin,

        There are really only two options for documents:

        • Use a Rise Attachment Block.
        • Host your documents somewhere other than SharePoint and use document links. 

        Both options have security related issues and require a procedure to track and update. 

        Your department will need to develop a formal security policy in conjunction with your IT department to determine what you may or may not do with documents that are used in your Rise courses.

        If you are hosting your Rise courses in a LMS, you may be using a third party LMS that is hosted outside your organization firewall. This poses security risks if you are you using Attachment Blocks.

        For our organization, because we use an external LMS, we are not authorized to use any sensitive type documents in our Rise courses. None.

        We use space on our company web server to host non-sensitive documents and link to them. We  use this method for documents that change fairly frequently.

        For a few static documents we use Attachment blocks.

        For both linked and attached documents, we have created a register to keep track of the documents used and the courses where they are used in case we need to make changes.

  • ErinMasson's avatar
    ErinMasson
    Community Member

    Thanks Karl, will enquire internally about using space on the org web server :)

  • JeremyNash's avatar
    JeremyNash
    Community Member

    I was able to get a Word doc that is stored in SharePoint to embed in a Rise course via the Multimedia Embed block today. I'm not sure if this is because of recent enhancements to the block, changes in SharePoint, or the security policy with my company's SharePoint configuration. 

    When SharePoint generates the embed code this is what I get (bold added to emphasize the core iframe tags):

    <iframe src="https://PATH-TO-DOC-IN-SHAREPOINT">This is an embedded <a target="_blank" href="https://office.com">Microsoft Office</a> document, powered by <a target="_blank" href="https://office.com/webapps">Office</a>.</iframe>

     

    As is, that did not work. I was getting an error in Rise "Please enter a valid URL or iframe." If I simplify the embed code by stripping out all the extra information between the open and close iframe tags it works. Like this:


    <iframe src="https://PATH-TO-DOC-IN-SHAREPOINT"></iframe>

    That allowed the document to embed within the Rise course as expected. I'd love to hear if anyone was able to get a doc embedded like this or using some other method.

    • MarieCorral-d97's avatar
      MarieCorral-d97
      Community Member

      when I tried to embed a document from a sharepoint file using the "standard" method of adding an iframe, it didn't work, but as long as sharepoint generated the embed code (with iframe), it works for me.