How do I add a Microsoft Bookings page to a SharePoint site?

Steps#

1. Get the iframe code. In Bookings, open the shared booking page, select Booking page, and copy the iframe from the embed option ("Embed in your website"). Full details in where to find the embed code.
2. Allow the domain (site collection admin). On the SharePoint site go to Settings → Site settings (or Site information → View all site settings), and under Site Collection Administration select HTML Field Security. Choose Allow contributors to insert iframes only from the following domains and add outlook.office.com. Add outlook.office365.com as well if your embed code or older links use it.
3. Add the web part. Edit the page, add the Embed web part, and paste the iframe code into it. Microsoft's web part accepts only iframe-based code over HTTPS; code with <script> tags is not supported.
4. Set a real height. The default code uses height='100%', which renders a short box. Change it to a pixel value such as height='900' (see fixing a cut-off embed).
5. Publish the page and test as a normal user in a private window.

If step 2 is skipped, SharePoint shows "Embedding content from this website isn't allowed", the message in the 2020 Q&A thread linked above.

The sign-in trap on intranets#

Intranet booking pages are often set to internal-only with Require a Microsoft 365 account from my organization to book. That setting redirects the frame to Microsoft's sign-in page, and the sign-in page refuses to be framed. A 2024 Q&A thread shows the result in SharePoint Online: a blank frame in Edge, "login.microsoftonline.com refused to connect" and ERR_BLOCKED_BY_RESPONSE. That thread ended with a request to open a support ticket, without a fix.

You have two options as of September 2026:

• Keep the page internal-only and use a Button or Quick links web part that opens the booking page in a new tab. Sign-in works normally outside a frame.
• Allow anonymous bookings by clearing the checkbox, which makes the embed load but also lets anyone with the link book. See sign-in required on booking pages before choosing this.

"Bad Request" inside the web part#

In a 2021 Tech Community thread (3,000+ views), SharePoint appended ?odSkipAutoFocus=true to the framed URL and Bookings answered with "Bad Request". Bookings pages have rejected other unexpected query strings too. If you see this, check the src in the frame (right-click it and inspect) and make sure nothing has been added to the Bookings URL. Microsoft hasn't documented a fix for this case, and it's unclear whether SharePoint still adds the parameter today.

For other blank-frame causes, work through the refused-to-connect checklist.

Doing this with BookingsXP#

SharePoint's Embed web part does not run scripts, so the BookingsXP script widget will not work there. The only option is BookingsXP's no-JS iframe fallback (add bookingsxp.com to HTML Field Security), which has a fixed height and does not send tracking events, so for most intranets the native Bookings iframe or a plain link is just as good. BookingsXP is independent and not affiliated with or endorsed by Microsoft.