Multi-Factor Authentication for Box

Question

Why am I now required to use Multi-Factor Authentication (MFA) to access BOX resources that have been shared with me?

Answer

South Dakota State University requires MFA for access to BOX accounts. University employees and students who access BOX using their SDState or Jacks credentials have MFA enabled by default and are not required to take any additional steps.

People from outside the university - also known as external collaborators - must have MFA enabled on their BOX accounts to access BOX resources owned by the University.

Individuals belonging to an institution that utilizes BOX and has MFA enabled should not need to take any additional steps; MFA should be enforced by that institution's BOX policies.

Individuals who have stand-alone accounts or that belong to an institution that does not require MFA to access BOX will need to enable MFA in their account settings. 

To enable authentication app multi-factor authentication for your individual BOX account:

1. Log into your BOX account.
2. Go to Account Settings > Account.
3. In the 2-Step Verification section, click Set Up. (Note: You will not see this section if your organization uses single sign-on (SSO) for authentication.)
4. Select Authentication App (recommended) and click Next.
5. Open the authentication app on your phone and scan the QR code. (You can also enter the secret key located under the QR code into the authenticator app manually.)
6. Enter the code you received in the authenticator app and click Submit.
7. Enter a phone number for verification, which would be used by Box support to verify your identity in the case where you are not able to authenticate in the app, and click Submit.
8. Copy the backup codes. Once copied, paste them into a file only you have access to and save the file somewhere secure. 
9. Click Complete.