Embedding docs from sharepoint into Rise 360 embed block

Jun 27, 2022

I want to embed PDF/word docs that are housed in sharepoint into a Rise 360 embed block - I have searched through the threads and haven't found any related articles.

When I try to embed, I get an error message saying that my company's sharepoint refuses to connect. Our IT department have investigated and determined that the embed of documents (even with public access ie. "anyone with link can edit") is forbidden by the Content Security Policy Directive "Frame-Ancestors" and that Microsoft will only allow documents served from Sharepoint to be directly embedded on other Microsoft Product Sites.

There is no error with the embed code as it works when embedded in Microsoft products (such as Sway).  I've also tried using the "embed from web" option on other interactive blocks such as accordion but it prompts the user to log into their microsoft account even though the link is public ("anyone can edit").

OneDrive for Business does not allow you to generate embed codes but you can with a personal account (go figure?!). I have tested this and embeds can be seen in Articulate if the embed code is generated from a OD personal account. But we're looking for a workaround that will allow us to keep document assets inside our sharepoint network. Thanks

7 Replies
Erin Masson

I'm asking if there's an alternative! I assumed the policy directive was not just confined to my organisation but Microsoft products generally so how do other people embed PDF's if Sharepoint (or OneDrive for business) is not an option? Surely others have the need to embed docs in Rise? If so, I want to know how you do it :)

Karl Muller

Hi Erin,

There are really only two options for documents:

  • Use a Rise Attachment Block.
  • Host your documents somewhere other than SharePoint and use document links. 

Both options have security related issues and require a procedure to track and update. 

Your department will need to develop a formal security policy in conjunction with your IT department to determine what you may or may not do with documents that are used in your Rise courses.

If you are hosting your Rise courses in a LMS, you may be using a third party LMS that is hosted outside your organization firewall. This poses security risks if you are you using Attachment Blocks.

For our organization, because we use an external LMS, we are not authorized to use any sensitive type documents in our Rise courses. None.

We use space on our company web server to host non-sensitive documents and link to them. We  use this method for documents that change fairly frequently.

For a few static documents we use Attachment blocks.

For both linked and attached documents, we have created a register to keep track of the documents used and the courses where they are used in case we need to make changes.

Jeremy Nash

I was able to get a Word doc that is stored in SharePoint to embed in a Rise course via the Multimedia Embed block today. I'm not sure if this is because of recent enhancements to the block, changes in SharePoint, or the security policy with my company's SharePoint configuration. 

When SharePoint generates the embed code this is what I get (bold added to emphasize the core iframe tags):

<iframe src="https://PATH-TO-DOC-IN-SHAREPOINT">This is an embedded <a target="_blank" href="https://office.com">Microsoft Office</a> document, powered by <a target="_blank" href="https://office.com/webapps">Office</a>.</iframe>

 

As is, that did not work. I was getting an error in Rise "Please enter a valid URL or iframe." If I simplify the embed code by stripping out all the extra information between the open and close iframe tags it works. Like this:


<iframe src="https://PATH-TO-DOC-IN-SHAREPOINT"></iframe>

That allowed the document to embed within the Rise course as expected. I'd love to hear if anyone was able to get a doc embedded like this or using some other method.

Karl Muller

Hi Jeremy,

According to the Rise release notes there were no recent changes to the Embed Block. https://articulate.com/support/article/Rise-Version-History 

Our SharePoint security policy prevents use from linking to documents from within a Rise course as our LMS is outside the company firewall.