Enrolling in 2FA for External Collaboration

Two-factor authentication asks you to provide two independent credentials to access an enterprise's shared content through Box.

• If you're enrolled in your Box account’s 2FA or are using an SSO provider to access your Box account, you can access the shared content.
• If you have access to shared content from an enterprise that requires 2FA, you need to enroll in 2FA from your Box account to access that shared content.
• If you're directly logging into your Box account without an SSO provider, and have not enrolled in 2FA, you cannot access shared content from an enterprise that requires 2FA.

Enrolling in 2FA

In the pending invitations panel on the All Files page, Box displays the titles of shared content blocked by 2FA. Box also displays the titles of any newly-shared content from that enterprise. To gain access to shared content, you need to enroll in 2FA.

To get details about content blocked by 2FA:

1. In the pending invitations panel under ACTION REQUIRED, hover on the blocked file or folder.
2. Click the ellipsis, (…) and select View Details. Box displays the Pending Invitations: Two-Factor Authentication Required window.

To enroll in 2FA through the pending invitations panel:

1. In the pending invitations panel under ACTION REQUIRED, hover on the blocked file or folder, and click Set Up Now. Box displays the Enable Login Verification window.
2. In Country, click and select your country.
3. In the Enter your phone number below field, type the phone number through which you want to receive the SMS code.
4. Click Continue. Box displays the Enter the code below field, and sends an SMS code to your phone.
5. Within one hour after receiving the SMS code on your phone, type the code in the Enter the code below field. This code expires in one hour.
6. Click Continue. The 2FA setup starts.

To enroll in 2FA through your Account Settings page:

1. Log into your Box account.
2. In the top-right corner of your Box window, click your account icon and select Account Settings.
3. In the Authentication panel, check Require 2-step verification for unrecognized logins.
4. In the top-right corner of the Box window, click Save Changes.

To remove yourself from collaboration:

1. In the pending invitations panel under ACTION REQUIRED, hover on the blocked file or folder.
2. Click the ellipsis, (…), and then select Decline.