what is the best way to embed a JSF webapp in other?

Question

I need to embed a JSF webapp into a Main page managed by other department. I've heard suggestions like 'session sharing', iframes (see image below), modal panel/pop up, but I am not sure about security and other concerns, can anyone explain what is the best approach to get this job done in the right way?

thanks in advance.