Steps to configure SAML SSO for Box

About Box

Box is a powerful intelligent content cloud platform that enhances secure collaboration and content management, leveraging AI to streamline workflows and transform unstructured data into actionable insights.

The following steps will help you enable SSO for Box from Identity360.

Prerequisites

1. The MFA and SSO license for Identity360 is required to enable SSO for enterprise applications.
2. Log in to Identity360 as an Admin, Super Admin, or Technician with a role that has Application Integration and Single Sign-on permissions.
3. Navigate to Applications > Application Integration > Create New Application, and select Box from the applications displayed.
   Note: You can also find Box from the search bar located at the top.
4. Under the General Settings tab, enter the Application Name and Description.
5. Under the Choose Capabilities tab, choose SSO and click Continue.
   General Settings of SSO configuration for Box.
6. Under Inte gration Settings, navigate to the Single Sign On tab and click Metadata Details. Download the metadata by clicking on Download next to the Metadata field. This will be used later during the configuration of Box.
   Integration Settings of SSO configuration for Box.

Box (service provider) configuration steps

1. Use the Box SSO Setup Support Form to have Box help you set up SSO.
2. Fill in the form with necessary information to setup Identity360 as an Identity Provider (IdP).
3. Enter your email address and give a brief of your purpose for this form.
4. Select Other with Metadata from Who is your Identity Provider? drop-down.
5. Add more details as required about setting up SAML SSO for Box.
6. Choose Priority as required from the drop-down.
   Box SSO Setup Support Form
7. Enter Box Subdomain value. For example, xyz.box.com
8. Under What is the attribute for the user's email?, enter SAML_SUBJECT.
9. Under Attachments, choose and upload the Metadata File downloaded from Step 6 of the prerequisites.
10. Click Submit.
    Box SSO Setup Support Form submission
11. Box support team will process your request and provide you with the necessary information to configure the SSO in Identity360.
12. It can take up to 24 hours to process the metadata. Once the file has been processed, Box sends a notification to the email address of the main account admin.

Identity360 (identity provider) configuration steps

1. Switch to Identity360's application configuration page.
2. Enter the Box Subdomain value in SP Identifier field. For example, if Box Sub Domain value is xyz.box.com, then xyz is your SP identifier.
3. Enter the Relay State parameter, if necessary.
   Note: Relay State is an optional parameter used with a SAML message to remember where you were or to direct you to a specific page after logging in.
4. Click Save.
   Integration Settings of SSO configuration for Box.
5. To learn how to assign users or groups to one or more applications, refer to this page.

Your users will now be able to sign in to Box through the Identity360 portal.