This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Subject : Garmin Connect – iFrame embed no longer works on external websites

Bonjour,

Je souhaite signaler un problème important concernant Garmin Connect Web.

Depuis le 10–11 novembre 2025, les parcours Garmin intégrés via l’option
Partager → Intégrer dans une page web
ne s’affichent plus du tout sur les sites externes (iframe vide).

Après vérification, les URLs du type :

https://connect.garmin.com/modern/course/embed/xxxxxxx

sont désormais bloquées par vos en-têtes de sécurité :

Content-Security-Policy: frame-ancestors 'self' X-Frame-Options: SAMEORIGIN

Ce changement interdit toute intégration sur un domaine externe, alors que l’option “Intégrer” existe toujours dans l’interface Garmin Connect.

Notre site de club cyclotouriste, Crécyvélo 77, est fortement impacté :
plusieurs dizaines de pages ne fonctionnent plus, par exemple :

Merci de nous indiquer :

  1. si ce blocage est volontaire,

  2. si l’intégration en iframe sera rétablie,

  3. et s’il existe ou existera une alternative officielle (widget, viewer embeddable, etc.).

Nous utilisons Garmin depuis des années et souhaitons continuer, mais ce changement soudain casse l’ensemble de nos pages de parcours.

Merci d’avance pour votre aide,
Club Crécyvélo 77

  • We’re experiencing the same issue on our cycle touring website: https://gcleterme.it/settimana-47-17-11-23-11/
    It had already happened some time ago, maybe a couple of years back, but then it was fixed and everything had been working properly until last week.
    We hope it can be resolved as soon as possible.

  • I am also having exactly the same problem, started a few days ago, early Nov 2025. A security setting must have been changed/updated on the connect.garmin.com webserver recently, to PREVENT iframe being used to present content on other websites.

    Just like Crécyvélo 77 and ASD Le Terme, I use embedded maps a lot on my cycle club's website in the UK, Team De Ver.

    Example:
    https://teamdever.co.uk/event/team-de-ver-xmas-ride-dinner-2025/

    GARMIN - Please investigate this as soon as possible - Otherwise the Garmin Connect Route "Share" feature and HTML code is useless.

    This fault will be affecting every customer who uses iframe embed codes and will have broken the content on many websites worldwide.

  • Same here!  Any updates????

    'm having trouble embedding Garmin routes on my website. I keep getting 'sso.garmin.com refused to connect.' error and the embedded route doesn't show. I've tried different browsers and incognito modes. What am I doing wrong? The website is here https://www.wokinghamcycling.club/wokingham-bikeathon-routes and the direct link to one of the routes is https://connect.garmin.com/modern/course/421039760

  • Hi  I contacted Support and opened a ticket way back in November, The last response I had was on 7 January 2026:

    Sadly, we do not have any updates on the investigation at this time.

    We can confirm Firefox does not look to have this issue, which could be used as a workaround. As soon as we have an update, we will let you know as soon as possible. 

    I think it would be a bit useless to state "please view this website with Firefox browser" haha so I personally I'm not really regarding this as a valid workaround. A quick look at my website stats suggests that < 0.5% of visitors to our website are using Firefox.

    I maintain this is still a problem that has recently been introduced at the Garmin Connect website end - and the way it allows/blocks requests from iframe embedding - rather than it being a problem caused by browser incompatibility.

    It may help to raise your own support ticket with Garmin, so they understand how widespread this issue is, and it is not a unique incident.

  • Thanks. I've also raised a ticket. Looks like iframes are out of fashion everywhere except Firefox. Garmin need to provide an alternative embed code.

  • Hello,
    Is there any link to the ticket you opened?
    The problem is in their javascript code. They make an additional ajax call to logout from the Chrome browser. That additional call to logout has the header "X-Frame-Options" set to "deny".

  • Hello,
    IFrames are not out of fashion.
    The problem is with Garmin's javascript code and the same problem would exist with any other embed code.
    They make an additional useless ajax call to logout from chrome-based browsers.