Require 2FA for certain content only (not globally)
Force 2-factor / MFA based on the type of content, folder, user. etc. - natively in Box or support this functionality through IdP
Michelle Mattern
shared this idea
-
Anonymous
commented
Any chance to get this going for 2022? Our customers at MITRE keep asking for this...
-
Anonymous
commented
This is exactly we are looking for. In addition, it would be great, if we can enable 2FA by group of users.
-
Anonymous
commented
This would absolutely be fantastic, and would *highly* improve our utilization of Box.
Currently, 2FA is enabled for external users either in totality (not what we want), or by domain/individual email address. Instead, we could use the following (in order of preference):
- Require 2FA for all content at a certain classification level. That would be ideal!
- Require 2FA for specific folders - harder to manage, but still workable
- Require 2FA for specific groups of usersNote that the current 2FA setting is not adjustable via API calls, which is unfortunate - as it keeps us from integrating it with our onboarding flows.