Cross-origin resource sharing

KCM is accessed directly from the browser while the page it is accessed from resides on the business application web server. This is called cross-origin resource sharing (CORS) and is only allowed under certain conditions. Therefore, we strongly recommend that you route the HTTP traffic to KCM through a proxy that shares its base URL with the business application. In this case, CORS-related restrictions do not apply.