function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Ryan Werner 22Ryan Werner 22 

Embedded login - blocked from "an ancestor value violates the following Content Security Policy directive"

Hello

I am working to build a POC for embedded login for our community. I am using the example repo:

salesforceidentity/embedded-login-example

I am getting an error saying "...an ancestor value violates the following Content Security Policy directive".

The Salesforce documentation (https://developer.salesforce.com/docs/atlas.en-us.externalidentityImplGuide.meta/externalidentityImplGuide/external_identity_login_considerations.htm) states that this is because the site is not listed under CORS. I do in fact have the site listen under CORS and it still isn't working.

Anyone have a similar issue? The entry into CORS is 
https://ryanwerner7052888.herokuapp.com which is the URL to the Heroku app I deployed this example code in. The "salesforce-allowed-domains" meta tag is also present on the page with the value "ryanwerner7052888.herokuapp.com"

What could I be missing? Thanks