Webview Requirements

Webviews Requirements:

1. Responsive and mobile-friendly
2. Static URL for all users

🚧

VTS Activate passwordless flow cannot be enabled for OIDC

Embedded Webviews allow:

1. Session state
2. Redirects and navigation including outside the initial domain
3. Show integrated modals and popups for content and notifications

Embedded Webviews do not allow:

1. Opening additional tabs
2. Opening a new browser window and multiple chained redirects
3. Interact with the calling application (outside of what is provided via OIDC claims)
4. Show browser alerts