Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

iFrame session monitoring

Relying party iFrame

search
printsuggest an editpdf paneldownload

Relying party iFrame

This is only a sample of a relying party iFrame that you can use. For details, refer to the pseudo code for Relying Party iFrame on the OIDC specification site.

Comments are added in the following sample, to highlight actions items for implementation or configuration.

<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>OpenID Connect RP Session frame</title></head>
<body>

<script>
  /*<![CDATA[*/
  var targetOP = "https://OPserver.example.com"; //URL of the OP
  window.addEventListener("message", receiveMessage, false);

  var scheduledCheck;

  window.onload = function () {
    // Check shortly after onload
    setTimeout(checkStatus, 2000);
    // Do not forget to deregister scheduled callback using clearInterval(checkStatus)
    scheduledCheck = setInterval(checkStatus, 1000*20); //Every 20 seconds
  };

  function getCookieValue(cookieName) {
    var name = cookieName + "=";
    var cookies = document.cookie.split(";");
    if (!cookies) {
      return null;
    }
    for (var i = 0; i < cookies.length; i++) {
      var cookie = cookies[i].trim();
      if (cookie.indexOf(name) === 0) {
        return cookie.substring(name.length, cookie.length);
      }
    }
    return null;
  }

  function checkStatus() {
    var client =  "oidc"; //This is the clientId that is configured on the OP
    //You can name this cookie whatever you want, it must be stored in a cookie after the authentication response, so that it is accessible here
    var sessionState = getCookieValue("session_state");
    var text = client + " " + sessionState;
    var iframe = window.parent.document.getElementById("opif"); //This is the ID of the OP iFrame that you set when including them on the main page
    iframe.contentWindow.postMessage(text, targetOP);
  }

  function receiveMessage(event) {
    if (event.origin !== targetOP) {
      // Origin did not come from the OP. This message must be rejected
      return;
    }
    if (event.data === "unchanged") {
      // User is still logged in to the OP, don't need to do anything
    } else {
      // Detected a change at OP
      // Perform authentication with `prompt=none` to check authentication status
    }
  }
  /*]]>*/
</script>
</body>
</html>

On this page