Embed the Hosted UI

Embedding keeps accounting views inside VRPlatform while your product owns authentication, navigation, and the iframe shell. The embedded surfaces are reports and statements only; the portal origin and allowed bundles are set up during partner onboarding.

The trust boundary is simple:

1. Your backend authenticates your user.
2. It then uses its partner API key to issue an embedded session.
3. Your frontend receives a 60-second, single-use bootstrap URL.
4. The iframe exchanges the code and keeps its 15-minute bearer token in memory; the parent never receives it.
5. Before session expiry, your frontend requests a new URL and remounts the iframe.

Read Issue Sessions, then iframe lifecycle and loading and error states.

If you want to render the product workflows yourself instead, use Build your own UI.