all experiments
Can you iframe it?
Try a website inside a frame and see how it behaves. Includes sample login flows and tips for troubleshooting blocked embeds.
sign-iniframesecurity
Try the experiment
Type any URL — your own app, a login screen, an internal tool, anything — and load it below in a real <iframe> to check whether it renders or gets blocked by X-Frame-Options / CSP frame-ancestors. A blank or refused frame means it's blocked — browsers don't expose a script-readable reason why, so this is a visual test, not an automated pass/fail.
Hosted vs. direct sign-in — what's the difference?
A hosted flow sends visitors to a separate sign-in page. A direct flow starts from the app. Either page may block being shown inside a frame; use the examples below to compare redirects, popups, and hidden-frame requests.
quick examples:
enter a URL above and hit load