Developer Connect: Upcoming Security Changes

Upcoming Security Policy Changes for iFraming Login Pages

In line with the latest industry trends and heightened privacy concerns, Google is set to phase out support for third-party cookies in Chrome by Q3 2024. As a result, applications that depend on third-party cookies, including those integrating with Encompass' Developer Connect APIs using SAML Sign On, will be impacted.

To bolster security and safeguard user data, ICE Mortgage Technology will soon disallow embedding login pages within iFrames. This proactive measure aims to mitigate potential security vulnerabilities linked to iFrames.

What This Means for You

If your application currently embeds our login page within an iFrame, it’s crucial to update your implementation. To ensure compliance with the new security policy, consider the following alternatives:

1. Redirect Users to the Login Page: Direct users to our standalone login page, ensuring a secure and seamless authentication process.

2. API-Based Authentication: Utilize our APIs to handle user authentication directly within your application, maintaining a cohesive user experience.

Next Steps

To navigate this transition smoothly, please reach out to your ICE Mortgage Technology support representative for assistance. They are ready to help you adapt your application to comply with the upcoming changes and maintain a secure environment for your users.

Stay proactive and secure—update your login implementation today!