We are using the client side embed option to embed a JSS app under a page in our portal. This portal is built on Sitecore and uses the standard username/password Forms Authentication setup. I am using the sample EmbeddedWizard JSS app as per https://jss.sitecore.com/docs/techniques/mvc-integration/client-side-embedding#client-side-embedding

I can get it working on website where you don't have to login, but I can't seem to get it working on an authenticated website.

I checked the ApiKey, CORS Origins = * , AllowedControllers = *

But still see error like

Access to XMLHttpRequest at 'https://jss.mysc.local/sitecore/service/noaccess.aspx?item=/sitecore/content/Applications/WebEdit/Ribbons/WebEdit&site=website&user=u_1900000' (redirected from 'https://jss.mysc.local/sitecore/api/layout/render/jss?item=%2FEmbeddedWizard%2FWizard&sc_apikey=%7B6A43BA10-D074-4BC9-AF8B-A9BC2AA35713%7D') from origin 'https://portal.mysc.local' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

u_1900000 is the username I logged in with.

Network XHR tab shows a request made to


with a 302 response to


Checked related issue on Error when trying to configure JSS connected Demo but no solution given.

Any help would be appreciated.

  • Do you get the same result in an incognito tab? The fact that /sitecore/content/Applications/WebEdit/Ribbons/WebEdit is being requested makes it appear that you are in edit mode. Aug 24 at 15:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.