Similar to Okta and Google Drive, we need the ability in Box to set use persistent cookie so the cookie doesn't expire when the browser is closed.
Google Drive allows this by default, and Okta lets us specify the policy for specific users:
( see usePersistentCookie according in https://developer.okta.com/docs/reference/api/policy/#signon-session-object)
* launch browser, go to Okta, and log in (our IDP)
* open up the box link - everything works
* close the browser
* open the browser
* I'm still logged into Okta (since I have usePersistentCookie turned on)
* when I go to a Box link, I'm required to renter my credentials
Reason why this is important: allows use Box in certain settings with custom apps.