Embed Reports in Iframes Securely | AI Insights 365

· Last updated

Prefer to watch? How to embed a report in your website Narrated video, 0:51

Embed reports

Drop a live AI Insights report into any web page via a signed embed token — no public links, fully revocable.

Publish first

Only a Published report can be read without signing in. Publish it from the
report toolbar; Unpublish closes public access again, and an org admin can
revoke the link outright from Organisation settings.

Generate an embed token

  1. Open the report → ⋯ → Embed…
  2. Click Generate token.
  3. Copy the iframe snippet:
<iframe src="https://aiinsights365.net/report/view/{guid}?t={signed-token}&embed=1"
        width="100%" height="720" frameborder="0"></iframe>

Testing your embed

Serve the page you are testing from over http or https. Opening your HTML
file straight from disk, so the address bar reads file:///C:/..., will not
work: a page loaded from the filesystem has no proper web origin, and browsers
refuse to let it frame a remote site. The iframe shows "refused to connect"
even when the embed is working perfectly.

The quickest way to check locally is to run a small web server in the folder
holding your page:

python -m http.server 8899

Then open http://localhost:8899/yourpage.html rather than double-clicking the
file. That matches the conditions of a real website. Once the page is live on
your own site there is nothing to do, because it is already served over https.

Security model

  • The token is a JWT signed with your org's key.
  • Tokens are scoped to one report.
  • Revoke any time from the Embed panel — the token version increments and old iframes 401.

Embed mode

The &embed=1 flag strips the navbar, breadcrumb, and footer so the report fills the frame.

An anonymous viewer must present a valid token. Without one they are sent to
sign in and returned to the report afterwards — a 401 is reserved for someone
who is signed in and genuinely lacks access. A public share link
(/report/share/{token}) mints a token for its bearer automatically, so it
opens without a sign-in as long as the report is Published.

Where it shines

  • Customer portals (white-labeled analytics)
  • Partner dashboards
  • Internal SharePoint / Confluence wikis