How to secure the dashboard in iframe embedding

In Bold BI, there is support for securely embedding a dashboard in an iframe. This feature allows specific users to view the dashboard at the embedded level.

This section will explain how to restrict the dashboard based on domain and IP address, and allow embedding a dashboard for a specific user.

Steps to enable the security for embedding the dashboard

1. In Bold BI Server, click on the context menu of the respective dashboard and select the Security option.
   

2. In the Security dialog, you will see the Apply these settings dropdown. Please select your security restriction.
   

   

3. The security restriction for the dashboard can be applied in following three ways. To learn more about these, please refer to this link.

   • Always - This would restrict users from accessing the specific dashboard privately, publicly, and through embedding.
   • When the dashboard is public and accessed anonymously - This would restrict users from accessing the specific public dashboard anonymously.
   • When the dashboard is embedded - This would restrict users from accessing the specific dashboard in an embedded manner.

4. To apply restrictions in embedding, you must select the When the dashboard is embedded option as follows.
   

5. Here, specify the allowed domains that can be accessed or embedded from known embedded application domains.
   

6. Here, please specify the device IP addresses of the users who are allowed to embed the dashboard.
   

7. Once you have added the Security settings for the dashboard, get the embed code from the desired dashboard, which you want to embed in your website. Get more details from the link to know how to Get Embed Code from the dashboard. Then, embed the dashboard in your application.

8. The dashboard can only be embedded in Domains specified in the Accept embedding requests from these websites section and in the allowed IP addresses specified in the Allow dashboard access from these IP addresses section.
   

9. The embedded dashboard will display an error or blocked warning message if domains and IP addresses other than those specified are found in the security settings.

   While accessing from unknown domains:
   

   

   While accessing from unknown IP Addresses:
   

   

   Note: The public dashboard will also be blocked for restricted domains and IP addresses when embedded in an iframe.