...
Spotlight is hosted by Astun Technology and uses Cross-Origin Resource Sharing (CORS), which is an HTTP-header based mechanism that allows a server to indicate any other origins (domain, scheme, or port) than its own from which a browser should permit loading of resources, to allow the Astun Cloud to talk to your Cloud.
The following image is taken from our demo installation https://ol-ishare.services.astuntechnology.com/v1.0.0-rc/apps/spotlight/index.html
...
Pointing Spotlight to your iShare instance
...