Views presented in Horizzon sites can be shared outside Horizzon by embedding them inside external content sharing platforms such as Microsoft^® SharePoint and Teams, and Confluence^®.

Views created in Enterprise Studio as well as Horizzon can be embedded. Views that contain the expanded content of a collapsed object from their "parent" view cannot be embedded themselves, but they can be accessed when the parent view is embedded.

Unlike sharing views within Horizzon, embedding only supports views with their regular presence. Views with an active viewpoint like a color view or label view cannot be shared externally.

Embedded views can be seen by anyone who has access to the respective platform page or the unique URL of the embedded view. Views that are shared outside Horizzon this way will redirect any visitor clicking to Horizzon when they are clicking the view. If a visitor wants to further explore the view in Horizzon, they must sign in. They must have the Consumer role (or a higher role).

For examples of embedding, see the Bizzdesign blog Unleash the power of Horizzon on SharePoint & Confluence.

Security considerations

Unauthenticated access to content

Embed links, which are created when embedding views, allow unauthenticated access to a view. Anyone with the correct link will be able to access the view. This should be taken into consideration when embedding views. While it is possible to protect the systems where the embed link is used (such as SharePoint or Confluence) there is no way to control whether the link is shared outside that context. To protect against unauthorized access Bizzdesign offers two security measures:

1. IP allowlisting: This will limit access to the shared content to requests from one or more IP addresses, typically your company's main internet gateway(s). It is highly recommended to use IP allowlisting if you intend to share views containing confidential information.
2. Non-reusable embed links: If an embed link for a view somehow leaks beyond your intended audience, disabling and re-enabling sharing of that view will invalidate the old link. 

Security-related settings in third party applications

Use of embedded content in SharePoint requires your SharePoint Administrator to enable embedding external content from your Horizzon domain name. Likewise, use of embedded content in Confluence requires your Confluence Administrator to enable the HTML macro (Confluence server). If you are using the Iframe macro instead of the HTML macro, you can share embedded content from Horizzon via direct link.

Enabling embedded views

Embedding views is not enabled by default. It requires activation in the Horizzon settings. To enhance the security of your data, you also need to add IP allowlists to specify which IP address ranges can access the views shared outside Horizzon.

1. In the Horizzon sidebar menu, click Settings.
   
   
2. In Embedded views, select Enable embedded views.
   
   
3. In Allowed IP4v and/or IPv6 ranges, specify the IP ranges.
   
   Any IP address that does not belong to the specified ranges will be rejected. You can add ranges in one of both fields, depending on your preference. To add multiple ranges in a field, add them separated by a comma. There is no need to add the same range(s) to both fields, but you can of course use both fields to specify different ranges. The IP ranges must be in CIDR notation. Examples:
   
   IPv4: 147.88.135.144/28, 148.77.135.144/22, .....
   IPv6: 2001:db8::/123, 2002::1234:abcd:ffff:c0a8:101/64, .....
   
   To allow anyone to access embedded views, enter 0.0.0.0/0 for IPv4 or 0:0:0:0:0:0:0:0/0 for IPv6.
   
   
   
   
4. Click Apply to save the changes.

Enabling embedding for a site

To be able to share views of a site outside Horizzon, the following conditions apply:

• Embedding views must be enabled for the site.
• The site must be shared with at least one user group.
• The user that is sharing must be invited to the model package the site is based on, or be the creator of the site.

1. In Horizzon, open the manage page of the site of which you want to embed views.
   
   
2. In the Manage site menu, select Share and embed, and then select the group(s) you want to share views with or choose All users.
   
   
   
   
3. Under Embedding views, select the check box.
   
   
   
   
4. Click Apply to save the changes. A pop-up message appears asking for confirmation.
   
   
5. Click Got it to confirm enabling embedding.

The site now supports embedding its views in external sharing platforms. 

Language of the shared view

When sharing a view outside Horizzon, the recipient of the shared view will see it in the default language of the model package the view's site belongs to. That may be a different language than you are seeing the view in when you share it if you have changed its model language. Be aware that the recipient cannot change the model language of the shared view. If you want the embedded view to be presented in a specific language, make sure that this language is the model package's default language.

Sharing a view in SharePoint

1. In Horizzon, open the view you want to share embed, and click Share at the top of the view.
   
   
   
   
2. In Embed view, click SharePoint.
   
   
   
   
3. In the pop-up window, click Copy, and close the window.
   
   
   
   
4. In SharePoint, open the page in which you want to embed the Horizzon view, and put it in edit mode.
   
   
5. On the SharePoint page, add an </> Embed web part, and paste the code you copied from Horizzon in the embed.
   
   
   
   
6. Republish the page.

The result is an embedded view in the SharePoint page.

Example of an embedded view in a SharePoint page

Sharing a view in Confluence

Sharing embedded content in Confluence Server, as described below, requires the availability of the Confluence HTML macro. If this macro is not available to you, it has likely not been enabled. If enabling is not an option because of security reasons, an alternative solution can be creating a user macro for framing an external website on a Confluence page, and use this macro for embedding your views. Creating user macros requires Administrator permissions in Confluence.

If you work with Confluence cloud, you can use the Iframe macro instead of the HTML macro. When using the Iframe macro, share your embedded views via a direct link. For instructions, see Sharing a view externally via direct link. Alternative macros may also be available via Confluence plugins.

1. In Horizzon, open the view you want to embed, and click Share at the top of the view.
   
   
   
   
2. In Embed view, click Confluence.
   
   
   
   
3. In the pop-up window, select a size for the view to embed (Small, Medium, Large), click Copy, and close the window.
   
   
   
   
4. In Confluence, open the page in which you want to embed the Horizzon view.
   
   

5. On the Confluence page, add an HTML macro, and paste the code you copied from from Horizzon into the macro.
   
   
   
   

6. Update the page.

The result is an embedded view in the Confluence page.

Example of an embedded view in a Confluence page

Sharing a view externally via direct link

If you want to share embedded content in Confluence and use the Iframe macro, or if you want to share embedded content via other content sharing platforms where embedding via direct link is desired, like Microsoft Teams, you can share Horizzon views by embedding a URL.

1. In Horizzon, open the view you want to embed, and click Share at the top of the view.
   
   
   
   
2. In Embed view, click Embed URL.
   
   
   
   
3. In the pop-up window, click Copy, and close the window.
   
   
   
   
4. In the content sharing platform, past the link where you want to share the view.
   
   When sharing in Confluence, open the Confluence page in which you want to embed the Horizzon view and add an Iframe macro to the page.
   
   
   
   Paste the link you copied from Horizzon into the URL field of the macro and set an appropriate height and weight in the respective fields. You can pick a size yourself, or choose to use one of the default sizes that Horizzon offers when generating an embed code for Confluence (see Sharing a view in Confluence):
   
   - Small: width=400, height=300
   - Medium: width=600, height=450
   - Large: width=800, height=600
   
   Any additional settings fore the embedded view are up to you.
   
   
   

Accessing collapsed content of embedded views

If an embedded view contains collapsed content, for example a collapsed ArchiMate^® object with other objects or a BPMN™ sub-process, this content can easily be accessed. To view the expanded content, click the collapsed object in the view or the plus control in the object. The view containing the expanded content is shown. To return to the "parent' view, click (diagrams and views created in Enterprise Studio) or (diagrams created in Horizzon).

Examples of views and their collapsed content

Accessibility of embedded views without required permissions

While an embedded view in a content sharing platform page is visible to anyone with access to that page, accessing this view in Horizzon is limited to anyone who is a registered Horizzon user with the Consumer role. When clicking the embedded view the user is automatically redirected to Horizzon. If they are not signed into Horizzon already, they will see the Horizzon sign-in window after clicking the embedded view.

In certain circumstances the view may be hidden to visitors. Instead of seeing a view, they will see an embedded page indicating to the user that the content is not available:

This situation can happen:

1. To visitors who have an IP address that is not within the IP allowlist.
2. If the view is no longer allowed to be embedded, or the secure URL to the view has been refreshed.
3. If embedding as a feature is disabled for this instance of Horizzon.

Stopping a view from being available outside Horizzon

Once a view is embedded outside Horizzon, it is accessible to anyone with access to the sharing platform page it is embedded in, or to anyone who has the URL from the embed code.

When you stop sharing the view, it will no longer be visible to others and the unique URL for the view will be invalidated. This means that it will no longer be available anywhere that it may have been embedded or via the unique URL from the contained within the original embed code. This also means that if you decide to embed the same view(s) in the future, you will need follow the steps again to embed content inside your content sharing platform.

Disable embedding for the site

By disabling embedding for the site, all embedded views within that site will be made unavailable outside Horizzon, meaning any embedded views or embed links for that site will no longer be accessible.

To disable embedding for a site:

1. In Horizzon, open the manage page of the site for which you want to disable embedding.
   
   
2. In the Share and embed section, under Embedding views, clear the check box.
   
   
3. Click Apply to save the changes.

All embedded views for the site will now be inaccessible outside Horizzon. If you wish to embed the view again, you will need to re-enable embedding for the site and embed the view in your particular platform.

Remove the embed link of the view

If you only want to stop sharing the view without blocking any other views in the site from being embedded, remove the embed link from the content sharing platform page.