Duo MFA for Box

Overview

The University offers the Box cloud-based file storage and collaboration platform for the secure storage and sharing of data. Some of these data may be defined as Confidential or Restricted Information by the University's Data Security Policy. Strong access controls, such as Duo Multifactor Authentication (MFA), are being implemented to reduce the risk of unauthorized access to such information.

Details / Instructions

You will be prompted for Duo MFA when accessing Box under the following conditions:

• Once per 24-hour period per web browser. If you use more than one web browser to access Box, you will be prompted once per 24-hour period for each browser.
• After you clear your browser cookies.
• Your initial access to Box using Box Drive or the Box App for each device.
• When your UR password changes.
• If you logout of Box Drive or the Box App on your device and then re-authenticate to Box Drive or the Box App on that device.

Important Note: Some users may experience a condition where they will not be prompted for MFA when accessing Box if they have recently accessed another application using Single-Sign On (SSO) with MFA, such as VPN or email, on the same device. This is expected behavior.

Accessing Box with Duo MFA in a Web BrowserShow

1. Navigate to https://box.richmond.edu and enter your UR credentials.
2. Select "Send Me a Push".  Note:  You can opt for your Box authentication to be remembered for up to 1 hour on the browser you are accessing the account from by selecting the "Remember me for 1 hour" check box.  This will place a cookie on your system to allow that continued access.  You must allow cookies from idp.richmond.edu for this function to work.
3. When you receive the Push prompt for Duo MFA, check the location of the request to make sure it matches your location.  If you are certain you initiated the request and the location matches, select the green check mark to approve.  If you are uncertain or know that you did not initiate the request, always select the red "X" to deny the request.
4. Access your Box storage.

 

Accessing Box with Duo MFA and Box DriveShow

1. Install Box Drive using the instructions on SpiderTechNet found here.  When prompted for authentication, enter your UR email address.
2.  Enter your UR NetID and password.
3.  Select "Send Me a Push".
4.  When you receive the Push prompt for Duo MFA, check the location of the request to make sure it matches your location.  If you are certain you initiated the request and the location matches, select the green check mark to approve.  If you are uncertain or know that you did not initiate the request, always select the red "X" to deny the request.
5.  Box Drive will now function on your system.  Please refer to the Box Drive SpiderTechNet article for instructions on working with this application. You will not be re-prompted for Duo MFA while using Box Drive on your device unless you log out of the application or change your password.

 

See Also

Box Platform Knowledge Base Article

Duo Service Article