SAP Digital Manufacturing: Embed Digital Manufacturing in Custom Web Apps

[Jonas_Haas]

One of the key features that sets SAP Digital Manufacturing (DM) apart is its flexibility in integration.
In addition to the extensibility options within Digital Manufacturing it is also possible to embed SAP DM in your own custom web applications. 

Context:

"To prevent clickjacking or overlay attacks, web browsers follow a same origin policy. The same origin policy means you can only embedded content in your web page if the content shares the same protocol, host, and port as your web page. If the origins don't match, you must maintain a list of origins that allows for exceptions to the same origin policy." Trusted Domains

It is recommended to instead ensure that your application runs under the same domain as the framing application.

Prerequisites:

Before getting started please review the security implications of using inline frames (IFrames) with your Apps. This post only describes the procedure for embedding SAP DM itself - so only for a User that is already logged in. To enable embedding also for the login process it is necessary to also consider the login page of the identity provider. Not all identity providers support framing. Help

Procedure:

1. Go to your subaccount and choose Security Settings.
2. Choose Add
3. Enter the host name for the trusted domain.
   For example: https://custom.exampleapp.com

Save your entries.

Usage:

A web application hosted at https://custom.exampleapp.com contains the following iframe
<iframe src="https://digital-manufacturing-cloud-xxxxxx.test.execution.eu20.dmc.cloud.sap/cp.portal/site#Shell-home "></iframe>​

If embedding is not enabled for the login page of the identity provider the user has to login in a different browser tab first. 

Conclusion:

Embedding SAP Digital Manufacturing within custom web applications offers an additional way to extend its capabilities and integrate it seamlessly into existing workflows. However, it's crucial to consider security implications and adhere to best practices to ensure a safe and smooth integration experience.