How to Embed a Local Intranet Website in SharePoint Online
Question details
The user needs to successfully embed a local, VPN-only, or internal intranet website onto a SharePoint Online page without it being blocked.
- Product
- SharePoint Online
- Device & OS
- not provided
- Scenario
- Displaying internal company web portals or local intranet pages via an embed web part or iframe within SharePoint.
- Observed behavior
- SharePoint Online blocks the embedded site from rendering unless the internal domain is explicitly approved in the site's HTML Field Security settings.
Ensure you are connected to your company's internal network or VPN, and verify that you have Site Collection Administrator permissions to adjust site security settings.
Add the Intranet Domain to HTML Field Security
Approve the specific internal domain in SharePoint's security settings to allow the embedded website to display.
SharePoint Online restricts embedding external or internal web content by default for security reasons. You must add the specific domain of your local intranet website to the approved list.
Click the gear icon (Settings) in the top-right corner of your SharePoint site and select 'Site information' from the menu.
Scroll to the bottom of the Site information pane and click on 'View all site settings'.
Under the 'Site Collection Administration' section, find and click on 'HTML Field Security'.
Add your local intranet domain (e.g., intranet.local) to the allowed list and save your changes.
Troubleshoot Existing Approved Domains
Perform these tests if your domain is already on the approved list but the intranet website still fails to load.
Looking for a Lightweight Document Solution?
If complex SharePoint administrative settings are slowing down your team's workflow, consider WPS Office. It provides a lightweight, free alternative for creating, editing, and managing your everyday office documents without requiring advanced tenant configurations.
- 1. Download the Application: Visit the official WPS website and download the free desktop application for your operating system.
- 2. Open Your Office Files: Easily open your existing Microsoft Office documents directly in the application.
- 3. Edit and Share: Make edits using the familiar tabbed interface and save them locally or share them with colleagues.
Frequently Asked Questions
Why does SharePoint block my internal website by default?
SharePoint Online employs HTML Field Security to prevent unauthorized or potentially malicious iframes from executing scripts on your pages. All custom domains, including internal ones, must be explicitly approved to bypass this block.
Why can't I find the HTML Field Security option?
This specific setting is restricted to users with Site Collection Administrator privileges. If you only have Edit or standard Owner permissions, the setting will be hidden. You must request your IT department or tenant admin to configure it.
Can I embed a local file path (like C:\) into a SharePoint page?
No, SharePoint Online requires web-based protocols (HTTP or HTTPS) for embedded iframe content. You cannot use local file directory paths as an embedded website.
