It could may be the 'x_frame_options' or 'session_samesite' config options you need to adjust. Details of the issue would help, what is reported in the browser (and browser console) or in the Roundcube error log?
iframes are often messy when it comes to browser security, the more info you can provide the more likely someone has some advice for you.