Enrolling in 2FA for External Collaboration

Two-factor authentication asks you to provide two independent credentials to access an enterprise's shared content through Box.

• If you're enrolled in your Box account’s 2FA or are using an SSO provider to access your Box account, you can access the shared content.
• If you have access to shared content from an enterprise that requires 2FA, you need to enroll in 2FA from your Box account to access that shared content.
• If you're directly logging into your Box account without an SSO provider, and have not enrolled in 2FA, you cannot access shared content from an enterprise that requires 2FA.

Enrolling in 2FA

In the pending invitations panel on the All Files page, Box displays the titles of shared content blocked by 2FA. Box also displays the titles of any newly-shared content from that enterprise. To gain access to shared content, you need to enroll in 2FA.

To get details about content blocked by 2FA:

1. In the pending invitations panel under ACTION REQUIRED, hover on the blocked file or folder.
2. Click the ellipsis, (…) and select View Details. Box displays the Pending Invitations: Two-Factor Authentication Required window.

To enroll in 2FA through the pending invitations panel:

1. In the pending invitations panel under ACTION REQUIRED, hover on the blocked file or folder, and click Set Up. Box displays the Set up 2-Step Verification window.
2. Select either:
   • Authentication app (recommended) to use 2-factor authentication with a supported app on your phone.
   • SMS Text Message to use 2-factor authentication via text message.

     Note

     The administrators of the enterprise may require that external collaborators use a TOTP (time-based one-time password) authenticator app, in which case the SMS Text Message option will not be available. 

3. Click Next, and then follow the directions on the screen to complete 2-factor enrollment.

See Multi-Factor Authentication Set Up for Your Account for additional details.

To enroll in 2FA through your Account Settings page:

1. Log into your Box account.
2. In the top-right corner of your Box window, click your account icon and select Account Settings.
3. In the Authentication panel, check Require 2-step verification to protect your account.
4. In the top-right corner of the Box window, click Save Changes.

To remove yourself from collaboration:

1. In the pending invitations panel under ACTION REQUIRED, hover on the blocked file or folder.
2. Click the ellipsis, (…), and then select Decline.