Configure User Panel Tab¶
User Panel Tab (userpaneltab) lets you embed a custom URL or page as a tab inside UCP (User Control Panel) for users. Useful for embedding a CRM, internal wiki, or custom dashboard alongside UCP's default widgets.
Before You Start¶
- The URL to embed is decided.
- The URL accepts being framed (no
X-Frame-Options: DENY); if it's external, confirm with the source. - For per-user URLs (with substitutions): the URL template uses placeholders like
[USERNAME],[EXTENSION].
Steps¶
- Go to User Attributes → User Panel Tab.
- Click + Add Tab.
- Configure:
- Tab Name — what shows on the UCP tab strip, e.g.
CRM,Wiki,Tickets. - URL — the page to embed. Use placeholders for per-user content:
[USERNAME]— User Management username.[EXTENSION]— user's default extension.[FIRSTNAME]/[LASTNAME]— user's name.
- Example:
https://crm.example.com/contacts?owner=[USERNAME] - Permissions — which user groups see this tab.
- Open in iframe —
Yes(default) embeds;Noopens in new tab.
- Tab Name — what shows on the UCP tab strip, e.g.
- Submit → Apply Config.
Verify¶
User logs into UCP at https://<unifiedbx>/ucp/. The new tab appears; clicking it loads the embedded URL.
Common Issues¶
- Tab appears but content is blank. Target site has
X-Frame-Options: DENYorframe-ancestorsCSP blocking. The site can't be embedded; use "Open in new tab" instead. - Placeholders not substituted. Wrong placeholder syntax. Use square-bracket form
[USERNAME], not curly braces. - User can't see tab. Permissions don't include the user. Edit Tab → check user group access.
- HTTPS warnings. UCP is HTTPS but embedded URL is HTTP — browsers block mixed content. Use HTTPS-only embeds.
- Embedded auth doesn't pass through. UnifiedBX doesn't forward credentials. Embedded site must do its own auth, ideally with single sign-on (SAML/OIDC) so users don't re-login.