Deep Link + iFrame Embed

Application Prefix

All CCP deep link-supported pages must start with /{APP_PREFIX}, where APP_PREFIX = ui/customercare.

Example:

https://{BASE_URL}/ui/customercare/...

Deep Link URL Examples

Replace {BASE_URL} with the correct environment host and {ACCOUNT_NO} with the target account number.

Make Payment

• Create New: http://{BASE_URL}/ui/customercare/accounts/{ACCOUNT_NO}/make-payment

Cash Credits

• List View: http://{BASE_URL}/ui/customercare/accounts/{ACCOUNT_NO}/cash-credits
• Create New: http://{BASE_URL}/ui/customercare/accounts/{ACCOUNT_NO}/credits/cash-credits/new

Branding

iFrame mode displays the exact same drawer shown in CCP, with the addition of the Aria logo in the header.

Close / Cancel Behavior

Because the deep link page is embedded, CCP cannot reliably go back and close the page. As a result, close affordances have been removed from the iFrame view:

• No X close icon
• No Cancel button

Authentication

CCP's current approach for third-party iframe embed uses normal CCP username/password authentication. SSO support has not yet been finalized.

Implication: The user in Salesforce or ServiceNow must be able to authenticate to CCP, or must already have an active CCP session.

Privilege Enforcement

Deep link pages enforce the same privilege model as the in-app UI trigger. If the user's privileges disallow access, the deep link page renders a 403-style error page — not a broken or empty form.

Embed Snippet

<div style="width: 1040px; max-width: 100%;">
  <iframe
    src="https://{BASE_URL}/ui/customercare/accounts/{ACCOUNT_NO}/make-payment"
    style="width: 100%; height: 900px; border: 0;"
    sandbox="allow-forms allow-scripts allow-same-origin allow-popups allow-downloads"
    referrerpolicy="no-referrer">
  </iframe>
</div>

Requirements for the Hosting Page

• Host container width must be ≥ 776px
• Prefer ≥ 1040px for Make Payment and Cash Credit Create pages (Open Transaction table pages)

What the Host Should Expect

• If the user is not authenticated: CCP will display its login flow.
• If the user lacks privileges: CCP will display a 403 error page.

Parent Listener (Salesforce / ServiceNow / Web App)

Add the following listener to the hosting page:

window.addEventListener("message", (event) => {
  // Always validate the origin
  if (event.origin !== "https://{BASE_URL}") return;

  const msg = event.data;

  if (msg?.type === "ccp.drawer.close") {
    // Close the modal or panel hosting the iframe
  }

  if (msg?.type === "ccp.drawer.complete") {
    // Refresh the surrounding UI, show a success message, etc.
  }
});

Salesforce

• Use a Visualforce page, Lightning Web Component (LWC), or Lightning App Page component that renders an iframe.
• Ensure the iframe container width meets CCP minimums (776px / 1040px depending on the page).

ServiceNow

• Use a Service Portal widget, UI page, or embedded content frame.
• Ensure the iframe container width meets CCP minimums (776px / 1040px depending on the page).

Cross-Domain Considerations

The third-party host must allow:

• Embedding the CCP domain inside an iframe
• Cookie and session behavior that supports embedded authentication (browser-dependent)