Safari View Controller and Chrome Custom Tabs Support

Safari View Controller (iOS) and Chrome Custom Tabs (Android) allow mobile applications a mechanism to bring the native OS web browser experience into their application. In our iOS and Android mobile apps, we've implemented this feature to provide end users (and their organizations) further control and flexibility on the authentication experience into Box.

Benefits

1. Greater control of the authentication experience by the individual and organization.
2. Using this feature Identity Providers (within the SSO process) and potentially password vault services can automatically populate user credentials.
3. If the user already has an active Box session on their device, they can now be seamlessly authenticatedinto Box without having to re-enter their credentials.
4. Ability to authenticate only approved devices
5. Organizations will be able to use certificate based authentication or perform other device level checks as a means of restricting access to only approved devices. Additionally they could use this as a means to provide easy access
6. Unified experience between what you see inthe Box app's login process and that of the device's native browser.
7. In the past, there have been some cases where authentication has failed in the mobile app but has worked in the device's mobile browser. This feature can help customers with unique login experiences that may not have previously worked in our app.

Concerns

1. Mobile Device Trust cannot be used in conjunction with this feature.
2. By enabling it our mobile apps lose control of the authentication process and therefore currently cannot run custom device checks during the process.
3. This feature requires the enterprise to be SSO enabled or above.
4. Enabling this feature flip will turn it on for both iOS and Android devices.
5. The user's SSO authentication session can remain active in the mobile browser even if they log out of the mobile app.
6. A user who navigates to box.com through their mobile browser may automatically be logged into their Box account due to an active SSO session on the device. This is similar behavior to what exists on the web app when there is no SSO logout redirect URL specified.
7. Some Android devices may not be compatible for instance if they do not have Chrome or an old version

How do I enable this feature for my enterprise?

If you would like us to enable these features for your organization, please reach out to your Customer Success Manager or Account Representative.