Persistent cookies
Similar to Okta and Google Drive, we need the ability in Box to set use persistent cookie so the cookie doesn't expire when the browser is closed.
Google Drive allows this by default, and Okta lets us specify the policy for specific users:
( see usePersistentCookie according in https://developer.okta.com/docs/reference/api/policy/#signon-session-object)
Workflow:
* launch browser, go to Okta, and log in (our IDP)
* open up the box link - everything works
* close the browser
* open the browser
* I'm still logged into Okta (since I have usePersistentCookie turned on)
* when I go to a Box link, I'm required to renter my credentials
Reason why this is important: allows use Box in certain settings with custom apps.
-
Anonymous commented
It's indeed boring to have to write email and password evrytime we open the web browser on box.com. Imagine that on services like Google, Netflix or Amazon? Even Microsoft offers that auto login ("remember me") function.