Limit the SFDC tenant which can be integrated via Box for salesforce to the one allowed by Box Admin
In the current Box for Salesforce integration, Box Admin can't limit the Salesforce tenant which can be integrated and Box for Salesforce integration can be setup with normal Box accounts so normal employee can set up Box for Salesforce by using their normal Box account and Salesforce Developer edition.
Even if the company prohibit to access Box from a private computer from home or outside the company network, once this integration was setup and access token was give to Box for Salesforce application a user can retrieve the contents via Box for Salesforce from a private computer.
So this can be security hole and we want Box to fix this problem. And if we can limit the Salesforce tenant which can be integrated to only the one Box Admin allow in the Box Admin console, I think this issue can be cleared.