...
Spotlight is hosted by Astun Technology and uses Cross-Origin Resource Sharing (CORS), which is an HTTP-header based mechanism that allows a server to indicate any other origins (domain, scheme, or port) than its own from which a browser should permit loading of resources, to allow the Astun Cloud to talk to your Cloud.
The following image is taken from our centrally hosted installation https://ol-ishare.services.astuntechnology.com/v1/apps/spotlight/index.html
...
Enabled CORS for iShare Maps
See Enabling CORS for details of how to enable CORS on your iShare Maps instance.
Pointing Spotlight to your iShare instance
...