SSO Break Glass Account
I have a customer that recently let their SSO certificate expire and when they tried to fix the problem they were completely locked out of their account and were not able to go in and resolve it themselves. They went to support who was ultimately able to help them, but not before a LOT of escalations. The customer stated that other online systems offer a special "break glass" administrative account that when logging in to the system can bypass SSO to get into the account and resolve whatever issue that needs to be resolved. They are asking for a similar approach with Box.
AdminJohn Beutler
(Sr. Solution Engineer, Box)
shared this idea
-
Anonymous
commented
Thats odd, I've got this already and have used this as my SSO went odd and locked people out. My main box account that isn't linked to any SSO can be used if my SSO breaks. It does mean you need to waste a box licence for this account but for me it also holds all the data so its fine for me.