Skip to main content

Configure Library Server for embedding

To embed Strategy content into your web application, the Library server can be configured to support cross-domain embedding, protect the domains configured in your security settings, and report usage of embedded content to Platform Analytics.

  • Enable Cross-Origin Resource Sharing (CORS)

    If you use the Embedding SDK on a different domain from your Strategy environment, enable CORS on the Library server and allow SameSite cookies, so that the embedded pages can communicate with the Library server across domains.

  • Hide irrelevant allowed origins in the CSP response header

    When multiple allowed origins are configured on the Library server, enable the features.hideIrrelevantAllowOrigins feature flag so that the Content-Security-Policy response header only exposes the allowed origins relevant to the current requester, and use wildcard allowed origins to cover subdomains.

  • Track embedded usage with client telemetry

    Enable the features.telemetry.embedEnabled feature flag so that usage of your embedded dashboards and widgets is recorded in Platform Analytics, separate from standard Library usage.