<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Thu, Apr 14, 2016 at 4:01 PM, Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">What do you mean about "if the URL is something like"?<div><br></div><div>The only iframe Keycloak uses is in the JavaScript adapter and it's only the session iframe. That would be the only place it would be relevant for Keycloak to set <span style="font-size:12.8px">P3P header, but don't think it's need AFAIK it works just fine on IE.</span></div></div></blockquote><div><br></div><div>Sorry for being a little too vague. </div><div><br></div><div>Among other UIs our application has a web front-end based on AngularJS and it's utilizing the JavaScript adapter for authentication. When I login to the application I can inspect the HTML and see an <iframe /> element with the following URL:</div><div><br></div><div><a href="https://keycloak-server/auth/realms/xxxx/protocol/openid-connect/login-status-iframe.html?client_id=xxxx&origin=xxxx">https://keycloak-server/auth/realms/xxxx/protocol/openid-connect/login-status-iframe.html?client_id=xxxx&origin=xxxx</a><br></div><div></div></div><br>
</div><div class="gmail_extra">Without the P3P header there is an eternal loop between our web front-end and Keycloak where the browser is being redirected from one to the other. After adding the P3P header the problem was solved.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Best regards,</div><div class="gmail_extra">Thomas</div></div>