What are the possible scenarios leading to an application linkage being cancelled?

Background Explanation

We offer a Box Connector that links our product with your Box API.

We use the node.js SDK.

Currently, our clients using the Box Connector have reported that synchronization is not working properly, and upon checking, we found that the linkage has been disconnected (our clients’ accessToken became invalid).
There is no way to disconnect the linkage from within our product.
We have received a report from a completely different client in the past that the linkage was disconnected by performing the “Delete all from history” operation from the security settings (https://{client domain}.app.box.com/account/security)

We believe there is a possibility that the linkage can be disconnected by an operation of an user with Box administrator privileges

Question
Our clients use their Microsoft accounts (via SSO) to log into Box.
It seems they are being automatically logged out when logging into Box and prompted to update their passwords.
Is there a possibility that the link with the application we provide could be disconnected if the Single Sign On authentication cannot proceed?

Comments