Help shape the future of Box
Welcome to Box Pulse, our product feedback tool powered by UserVoice. Got an idea for how to improve Box? Share it with us and gather support or vote on other people's ideas. Your feedback is essential to informing roadmap decisions and shaping the future of our products. Thanks for joining our community!
See user guide here.
38 results found
-
Make Classification One- Step/Right click for end users
Governance + Webapp
We would like to have a simpler way of adding classifications. Currently, users have to click into the document, then click details, then add classification tag on the bottom. We would like to have a simpler way such as adding Box Governance options to the "More Options" drop down menu
5 votes -
Maintain resolution of watermarked content.
Both previewed/downloaded watermarked files are difficult to view due to resolution degradation
7 votesWith the vector watermarking feature, the resolution of watermarked content can now scale infinitely.
-
3 votes
Crowdstrike is supported.
-
Set Classification at a folder level and have files inherit that Classification
Folder level Classification - ability to assign a classification at the folder level so that any file that hits the folder or sub-folders will inherit that classification.
49 votes -
48 votes
We delivered support for TOTP as the second factor earlier this year.
-
73 votes
Read more about this feature here: https://blog.box.com/enterprise-security-two-factor-authentication-external-users
-
If blocking m.box.com, also prevent mobile browsers from authentication through to desktop version of site
Device Trust might solve this for iOS but Android isn't available.
2 votesThis restriction is now by default when administrators restrict access to “WebApp and 3rd party applications” in Device Trust.
-
Allow MFA via phone call
Users who cannot receive SMS messages to their mobile phones should have an alternative to secure their accounts.
2 votesYou can achieve this via TOTP (delivered last year) and email (coming soon). No plans for phone call.
-
Open Shared Link Controls: 'Auto-Expiration' to Only Impact Open Links ('People with the link' links)
Currently, the Auto-Expiration setting for Shared Links, if enabled, applies to ALL shared links regardless of whether they're set to people with the link, people in your company, or people in the folder.
28 votesYou can control Auto-expiration separately for open shared links.
-
8 votes
-
Multi-Factor Authentication for SSO required
We would like to be able to issue Multi-Factor Authentication (MFA) in addition to SSO required and for specific groups like external collaborators, contractors, and remote employees
5 votesThe option to require 2FA for external collaborators has been delivered earlier this year. This feature, while independent from the SSO configuration should answer to the original ask.
-
0 votes
Please see https://community.box.com/t5/Box-Product-Updates/Restrict-Ownership-Transfer-of-a-File-or-Folder/idi-p/66485 for more detail.
-
0 votes
We have added events for:
1. When a user fails a device trust check
2. What checks they failed in the details -
Improve Certificate Checking & Rotation Process
Proper certificate hygiene includes frequent rotation of certificates. In a large fleet of devices this may not be something that can be done instantly, so there should be a more flexible way to define what is trusted other than a single cert.
A generic cert can easily be copied from one device to another allowing a clever use to spoof the check on an unmanaged device.
5 votesIn April we released support for unique per device and have updated our cert validation mechanism to be more robust.
-
1 vote
This capability is already available by selecting “Files Only” in “Enable external links to”. Selecting this option will disable external folder sharing but allow external files sharing.
-
1 vote
Done!
-
1 vote
-
Allow administrative "As-User' calls to bypass steps that require user intervention, such as accepting Custom Terms of Service.
As-User calls made by an admin, on behalf of the user, should not require any end user interaction to work. This supports API driven administration prior to making Box available to end users, which is common when deploying at scale or performing data migrations.
In particular, non-acceptance of Custom Terms of Service and Uncompleted Email Verification currently cause such calls to fail until the end user takes action to complete them.
makes the migration process overly complex.7 votesGreat feedback. Currently, there is no Email Verification required today for app users, and we do have a Terms of Service API: developer.box.com/reference#terms-of-service-object
- Don't see your idea?