But I believe you can build in authentication flows inside the iframe itself. It is not easy, but it is possible.

Imagining the web app in the iframe does manage too authenticate, will it be able to use microphone and video ressources?