Fix iOS Microsoft Office Security - No Pin Required
If you have Box Mobile App installed and a Pin is enforced, your data is protected by pin every time you launch the app. If you install iOS Excel or Word and then sign into the application/authorize, anytime you launch word or Excel you are not prompted to sign in again and there is no passcode enforced on either of those apps. They have full access to all documents in your Box account. Box Device Trust and EMM will not enforce or protect this either and is easily bypassed since this is an Application Integration, you don't even need Box Mobile installed for the integration.
The only work around is to disable the Office Mobile Integration in the Admin console and instead force the "open with Excel/Word" option from with the Box Mobile App. This however is not perfect since you cannot create any new documents or spreadsheets. You can only duplicate an existing one and rename it since Box App doesn't support creation of new content in Word/Excel from the Box Mobile app.
Box cannot enforce pin codes on third-party apps.
-
Anonymous commented
This is a big back door hole to the security of Box and really limits what can be done for mobile editing. i can put all the security in the world around the login to box but if we can't tenant lock the office mobile app or enforce a pin on the office app then we can't allow users a mobile editing experience for word, PP and excel. i am the main admin for a large box customer and would like to offer mobile editing under MAM (without enrollment) but if this does not get fixed OneDrive will win out. . Device trust does not cover this. Open in is not really working anymore either on IOS.
-
Box Admin Admin commented
How frustrating an issue like this will just sit here with no traction. I guess security isn't a big deal.