iFrames allow Affiliates to embed WMC order forms onto external websites. Below we’ll outline instructions and best practices for embedding order forms onto your sites.

Domains

WMC added a security implementation (based on the documentation: https://content-security-policy.com/frame-ancestors/) so that ONLY whitelisted domains can load WMC content pages on an iFrame.

Note: As a functional limitation currently, every Organization needs to have both the Contactly Domains and the WMC Content App domain (Set on the Effort level) to fully support the User Customer Support.

prod-content-app-gateway.apps.c7-prd-osd.jfqk.p1.openshiftapps.com

 Other Domains

Any other Domains will have the following tags on the response header. This will prevent the page to be loaded, resulting on a 404 error.

frame-ancestors 'self'

Phase 1 Recommendation:

• Use effort created (beginning to end) in WMC - order form, journey AND effort created in WMC

  • Why? We can only support one domain for the iFrame so we can’t utilize the IRIS connection/promotion domain

  • Reporting implications:

    • Will not see the promotion code/effort in IRIS

    • Will not see stats in IRIS

    • Will only see basic order reporting in BI reports (no IRIS stats)

      • Since we recommend basic order forms only for this functionality (aka no promotional elements – see below) missing stats should be limited

• Only include e-comm components (order form and confirmation page)

  • Don’t include marketing components (promotional content, videos, etc.)

    • Why? This functionality and reporting related will be limited when using WMC end to end (for more information: WMC End to End Limitations)

• Simple, one-step, main item orders only – don’t recommend cross-sell and upsell components

  • Why? Reporting related will be limited when using WMC end to end (for more information: WMC End to End Limitations)

Phase 1 Instructions:

• Once the effort is created in WMC, use the effort link (located at the bottom of the ‘edit’ effort screen) when setting up the iFrame on you external website

  • Will use a transaction domain

• Sandboxing will be handled by WMC (adding sandbox and attributes to the headers)

  • NO ACTION is needed/suggested from the Affiliates, as it will break the functionality.

  • Any content loaded from within these domains, will have the following tags on the response header:

sandbox allow-forms allow-scripts allow-same-origin allow-popups