title: Internet Explorer Cross Domain Iframe Login
body: <p>I have a Java web application in domain A (that we control). This application displays another website located in domain B (which we do not control) in an <code>iframe</code>. This external website was recently updated to require users to log on before they can see content. They provided us with a URL that will automatically log our users into their site. This URL works when we navigate directly to it in Internet Explorer (we get automatically logged in etc).</p>
  
  <p>However, apparently there was an <a href="http://thedesignspace.net/MT2archives/000472.html#.UjIWQqOwa3k" rel="nofollow">update to Internet Explorer</a>  so that cross domain communication is not allowed. So now when the login URL is displayed in the <code>iframe</code>, it does not successfully log on (I am guessing its being blocked from creating security cookies). </p>
  
  <p>Also, if we browse to the URL directly and get the security in place, then any <code>iframe</code> elements of the site will not work (I am guessing it is being blocked from accessing security cookies). </p>
  
  <p>Does anyone know of a work around for this? Changing the security level on Internet Explorer is not an option (it is controlled by our company's system administrator). Internet Explorer is also our company standard, so we cannot change that (even though it works fine in Firefox). </p>