Salesforce CTI integration fails to load iframe due to X-Frame-Options restriction

Question

Hello,

We are trying to integrate Zoom Phone with Salesforce using the Zoom for Salesforce Lightning CTI adapter.

Current configuration:

CTI Adapter URL: https://zoom.us/lightning/zoomphone/lightning.app
Permissions sets assigned (Zoom Phone User)
Zoom Marketplace app authorized
Phone number assigned and active
User email address matches between Salesforce and Zoom
Clickjack protection disabled on Salesforce

Issue:

When opening the Phone component, we get the following error:

Refused to display 'https://zoom.us/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

Additionally, there is a 404 error:

Failed to load resource: the server responded with a status of 404

Question:

Does this require any special configuration or account-level activation on the Zoom side to allow iframe embedding for Salesforce CTI? Could you please advise the next steps to resolve this?

Thank you.

LL-Tam · Answer

We ran into a similar problem at our company after upgrading the Zoom → Salesforce integration from v1 to v2, with errors such as:

401 Unauthorized
applications.zoom.us refused to connect.

Framing 'https://applications.zoom.us/' violates the following Content Security Policy directive: "frame-ancestors 'none'". The request has been blocked.

(index):1 Failed to load resource: the server responded with a status of 401 ()Understand this error (index):1 Unsafe attempt to load URL https://applications.zoom.us/salesforce/phone/index.html?mode=Lightning&isdtp=vw&sfdcIframeOrigin=https%3A%2F%company.lightning.force.com&nonce=xyzf&clc=1 from frame with URL chrome-error://chromewebdata/. Domains, protocols and ports must match.

The issue was the CTI Adapter URL. It was fixed via the following steps:

(1) Go to Setup -> Feature Settings -> Service -> Call Center -> Call Centers.

(2) Click on "Zoom Phone".

(3) Change the CTI Adapter URL field to: