Product Guides are now only available at docs.box.com. Check out all the details on what's changed.

Box Status
Print

Logging in with Single Sign On (SSO)

has_image , End User , Single Sign On , SSO , log , Article , Product Utilization , Established , Instruction

Single sign on authentication

Single sign on authentication (or SSO authentication) allows you to log in to multiple applications using a single set of credentials. If your administrator has enabled or required SSO for your organization, you can use your company credentials to log in to Box.

Follow these steps to log into your Box account using SSO authentication:
From box.com:
  • Enter the email address affiliated with your Box account.
  • In the bottom right, click Sign in with SSO:

  • You are redirected to your company's login page.  Then enter your company credentials to gain access to your Box account.
From Company Branded Subdomain (yourSubdomain.box.com)
  • If you are logging in via your company's branded Box subdomain (that is, yourSubdomain.box.com), and your enterprise has enabled or required SSO, the following prompt displays:

  • Click Continue.  You are redirected to your company's login page.  Then enter your company credentials to gain access to your Box account. 

SSO on mobile devices

If SSO is enabled for your account, to login to Box using SSO authentication on any mobile device, tap Sign in with SSO underneath the Log In button:

If your admin requires SSO for your account, you'll first need to sign in to Box, and then sign in to your account:

 

 

After signing in, on the next page, enter the email address associated with your Box account. Clicking "Log In" will redirect you to your company or university login page. Enter your company or university credentials to log into Box.

 

Using SSO to log in to 3rd-party mobile apps

A majority of 3rd party applications and our OneCloud partners now support SSO and have a dedicated SSO login button labelled - Use Single Sign On (SSO). If your company has SSO required, you can click on the SSO log in button and then enter your Box specific email address. This should then redirect you to your company login page, where you will need to log in with your company credentials.

 

Follow these steps to log in with SSO:

  • Inside of the application you want to use, locate Box by looking for "App Integrations" or "Server Connections" and select the "Box" connection.
  • Depending on the application, you may be asked to enter your username (email address) before you can see the SSO login button.

  • SSO Login On 3rd Party Mobile Apps-1.png

     

  • Select "Use Single Sign On (SSO)"
  • Enter your Box specific email address
  • You will be redirected to your company company login page. Enter your company credentials in order to gain access to your Box account

SSO passkey authentication support

Passkey authentication as part of an SSO login flow is supported in the Box.com web application, but is not currently supported in the native Box mobile application. 

If your enterprise requires passkey authentication as part of its SSO flow on mobile devices, the current workaround is to enable the Mobile Native Browser Auth setting. This setting routes mobile SSO authentication through the device's native browser instead of the in-app browser, which supports passkeys.

Note:

  • The Mobile Native Browser Auth setting is not compatible with Device Trust. If your enterprise has any Device Trust settings in place, these must be removed before Mobile Native Browser Auth can be enabled.
  • To enable Mobile Native Browser Auth, contact Box Product Support.

Notes:

  • While the Box API supports SSO login, because of the customization that goes into setting up SSO, occasionally there are apps or SSO configurations that are not optimized for SSO login on mobile. If it does not work for an app, you will need to create a Box-specific password in your account settings to login with.
  • SSO won't work for any app using FTP
  • 3rd Party App developers must also optimized their apps for SSO login, so you may see issues on an app by app basis
  • If you are not able to log into your Box account from within a third party application your admin may have disabled this application for the Enterprise from within the Admin Settings. You would have to contact your admin to have them enable the application for the Enterprise from within the Apps tab of the Admin Console.
tech_writers_swarm_kb

Related articles