We are using an application using domain A, on this application we have some list of documents ID.

When we click on theses ID, it should load an application B into an iframe to render this document. Application B, use SSO authentification through a domain C to be working.

<iframe
  title="Viewer"
  height="400"
  width="800"
  id="idframe"
  sandbox="allow-scripts allow-same-origin allow-forms allow-top-navigation"
  src="https://domain_B.com/?scope=test&sso=auto&docID=DOC_ID">
</iframe>

Application into domain A -> embeded iframe with domain B -> call SSO Server on domain C with redirect_uri to domain B

We have tried using sandbox, but we are still encounter what we guess are cross-domain issue.

We own the application in domain A and B and we use the service of application C to authenticate.

Is there any ways to make this works ?

Regards,