Configuring Content Security Policy for the Hyland UI Application - Configuring Content Security Policy for the Hyland UI Application - Other - Other - OnBase Integration for Salesforce - Other/OnBase-Integration-for-Salesforce/3.3/OnBase-Integration-for-Salesforce/Installation/Installing-packages/Installing-the-UI-application/Configuring-the-Hyland-UI-application/Configuring-Content-Security-Policy-for-the-Hyland-UI-Application - 3.3 - 3.3

OnBase Integration for Salesforce
Platform
Other
Product
OnBase Integration for Salesforce
Release
3.3
License
ft:lastPublication
2026-08-20T22:05:38.760000
ft:locale
en-US

This section describes how to configure the content security policy for the Hyland UI application by editing the contentSecurityPolicy.json file.

To configure the content security policy for the UI application:

  1. Open the contentSecurityPolicy.json file in a plain-text editor with elevated or administrator privileges. In a typical installation, this file is in C:\Program Files\Hyland\oifs\config\.
  2. If the Hyland Identity Provider is hosted on a server different from the Hyland UI application, under the section Policies , add the Identity Provider server's domain.

    A sample contentSecurityPolicy.json file may look like the following:

    "Default": {
    "Policies": [
        "'self'",
        "https://<identityprovider-server-domain name>"
    ]
},
  3. If the Hyland API Server is hosted on a server different from the Hyland UI application, under the section Policies , add the Hyland API Server's domain.

    A sample contentSecurityPolicy.json file may look like the following:

    "Default": {
    "Policies": [
        "'self'",
        "https://<identityprovider-server-domain name>",
        "https://<api-server-domain name>"
    ]
}
  4. In the file, locate the following configuration: 
    "FrameAncestors": {
      "Policies": [
        "'self'",
  5. After this configuration, add the following text: 
    "https://*.vf.force.com"
    For example:
    "FrameAncestors": {
      "Policies": [
        "'self'",
            "https://*.visualforce.com",
            "https://*.sandbox.visualforce.com",
            "https://*.visual.force.com",
            "https://*.sandbox.visual.force.com",
            "https://*.lightning.force.com",
            "https://*.sandbox.lightning.force.com",
            "https://*.my.salesforce.com",
            "https://*.sandbox.my.salesforce.com",
            "https://*.vf.force.com",
            "https://*.sandbox.vf.force.com"
           
      ]
  6. Save the contentSecurityPolicy.json file.
  7. Close the plain-text editor.