"99% of IDPs in an enterprise setting are configured to refuse being framed (for "security" reasons)" No need for the quotation around "security". Clickjacks a

"99% of IDPs in an enterprise setting are configured to refuse being framed (for "security" reasons)" No need for the quotation around "security". Clickjacks and other forms of attacks involving iframing authentication providers are a real threat.