title: ADFS 4 -'X-Frame-Options' to 'deny'
body: <p>I have an aspx page embedded in Dynamics CRM. The aspx page uses openId and an adfs application group to authenticate and has been working up until security update KB4493473 (it is an assumption that the update is causing the issue). Prior to the update, when the user loaded the CRM form, the iframe would seamlessly load without issue or authentication prompts. 
  Since the update, the console gives this message: '<a href="https://sts" rel="nofollow noreferrer">https://sts</a>...<em></em>... &amp;x-client-SKU=ID_NET451&amp;x-client-ver=5.2.1.0' in a frame because it set 'X-Frame-Options' to 'deny'.</p>
  
  <p>I have not found any way to have adfs NOT send that x-frame header, is there any workaround here? </p>