For Helio Network installers & dealers. Not affiliated with your Aurora Solar login.
Simulated login for demo purposes. Any credentials work.
Installations assigned to Sonnwerk by Helio Energy Group.
| Customer | Status | System size | Last updated | |
|---|---|---|---|---|
Fischer Residence Leopoldstraße 44, 80802 München |
Design in progress | 8.4 kW | 2 days ago | Open in Aurora → |
Huber Family Home Rosenheimer Str. 12, 81667 München |
Proposal sent | 6.1 kW | 5 days ago | Open in Aurora → |
Wagner Bäckerei (C&I) Dachauer Str. 210, 80992 München |
Sold | 22.0 kW | 1 week ago | Open in Aurora → |
Schneider Residence Tegernseer Landstr. 88, 81539 München |
Installed | 9.8 kW | 3 weeks ago | Open in Aurora → |
Keller Household Ainmillerstraße 5, 80801 München |
New lead | — | today | Open in Aurora → |
Tested 2026-07-27: app.aurorasolar.com sends X-Frame-Options: SAMEORIGIN and a
blocking CSP (frame-ancestors 'self' https://*.auslr.io https://*.aurorasolar.com) — it
refuses to render in a third-party iframe. v2.aurorasolar.com (used above) only sends a
report-only CSP, so it embeds successfully today. A report-only policy can be tightened to
enforcing at any time.
Interaction requires HTTPS. Per Aurora's
embedded-apps guidance,
an in-iframe Aurora session needs cookies set SameSite=None; Secure, and Secure
mandates HTTPS on both sites — so the app is non-interactive when served over http://localhost.
This page is deployed to HTTPS (helio-demo.pages.dev) for that reason.
Better path than embedding the login page: once SSO is configured, use the SSO deep-link
({openid_base_url}?redirect_url=https://v2.aurorasolar.com/projects/<id>) as the iframe
src — it authenticates via the IdP and lands straight in the assigned project, removing the
in-frame login step entirely.