Run the setBPMProperty command to allow BPM to connect to an outside URL/Domain
AdminTask.setBPMProperty([‘-de’, ‘WorkflowCenter’, ‘-name’,’Security.ContentSecurityPolicyHeaderValue’, ‘-value’, “default-src ‘self’ ‘unsafe-inline’
‘unsafe-eval’ https://bpm1.ibm.com:8410 ;frame-ancestors ‘self’; img-src ‘self’ data:”])
1) Replace ‘WorkflowCenter’ with the name of your deployment environment
2) Replace https://bpm1.ibm.com:8410 with url:portnumber to which you want to connect to securely.
By running this command, you are setting the ContentSecurityPolicyHeaderValue Security property. This property instructs the browser to load and run assets in the context of Business Automation Workflow user interfaces only from a set of whitelisted origins. The above command instructs the browser to retrieve data from the whitelisted URI.