Craig Daniels

Error

Access to XMLHttpRequest at ‘https://sample-opa.custhelp.com/web-determinations/redirectQuery’ from origin ‘https://sample.custhelp.com’ has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.

Solution

In order to allow only certain websites to embed an Intelligent Advisor interview or flow, you need to set up a cross origin request from the server hosting the application. This will ensure that only authorized sites can access the interview or flow.

1. Log in to the Intelligent Advisor Hub web interface with a Hub administrator user role.
2. On the dashboard page in the Permissions column, click View all permissions. The Permissions page is displayed.
3. Click the Actions menu and select Access settings. The Access settings page is displayed.
4. Under Interview access control, click Add Host.
5. In the CORS hosts field, enter the address.
   
   
   
   Note that:
   • Only https:, http: and app: URL schemes are supported.
   • An asterisk (*) can be used as a wildcard to indicate any number of characters after the https:// or http:// and before the site name. For example, https://*.somesite.com. Note that short wildcards such as http://*.com or http://* are not allowed.
   • The combined list of sites cannot exceed 8000 characters in length.
6. Click Apply.