SAP Knowledge Base Article - Public

2896433 - LMS content CORS policy No 'Access-Control-Allow-Origin'


  • When launching AICC content or SCORM 1.2 (which uses the PwsAICC communications) content you may see some resources fail to load.
  • When tracing you receive message such as "... has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource." and "Failed to load resource: net::ERR_FAILED"


SAP SuccessFactors Learning (LMS)

Reproducing the Issue

Launch some AICC or SCORM 1.2 course imported to iContent which is loading some resource from an external third party server.


LMS servers will reject third party resources with AICC or SCORM 1.2 content when it is not using https or is not publicly available (does not require authentication).


Go to LMS > System Admin > Configuration > System Configuration > LMS ADmin and utilize the following settings:

# Access-Control-Allow-Origin CORS header for the AICC endpoint PwsAicc
# Enable it to allow AICC content hosted on a different domain (cross-domain content) to communicate with LMS server via Ajax, i.e XMLHttpRequest
#specify your content server domain instead of * for better security.

Note if resources are not publicly accessible, utilize cross-domain solution instead, see See Also section below.

See Also

  • 2407011 - LMS Cross Domain Solution (CDS) Knowledge Support and Tips
  • 2316110 - How to Implement Cross Domain Solution - AICC Contents hosted in a different server location - [LMS]


SAP, SF, success, factors, LMS, learning, CORS, Access-Control-Allow-Origin, Access, Control, Allow, Origin, cross-origin, cross, content, launch, load , KBA , LOD-SF-LMS-CNT , Content , LOD-SF-LMS-ADM , Admin Tools , LOD-SF-LMS , Learning Management System , Problem


SAP SuccessFactors Learning all versions