Skip to main content

Single sign on authentication

Single sign on authentication (or SSO authentication) allows you to log in to multiple applications using a single set of credentials. If your administrator has enabled or required SSO for your organization, you can use your company credentials to log in to Box. Follow these steps to log into your Box account using SSO authentication: From box.com:
  • Enter the email address affiliated with your Box account.
  • In the bottom right, click Sign in with SSO:
Sign In password screen with Log In button; red circle highlights Sign In with SSO link.
  • You are redirected to your company’s login page. Then enter your company credentials to gain access to your Box account.
From Company Branded Subdomain (yourSubdomain.box.com)
  • If you are logging in via your company’s branded Box subdomain (that is, yourSubdomain.box.com), and your enterprise has enabled or required SSO, the following prompt displays:
Box for ACME sign-in screen with Email Address field, Next button, and enterprise info footer.
  • Click Continue. You are redirected to your company’s login page. Then enter your company credentials to gain access to your Box account.

SSO on mobile devices

If SSO is enabled for your account, to log in to Box using SSO authentication on any mobile device, tap Sign in with SSO underneath the Log In button:
Box mobile login screen with password field; red circle highlights Sign in with SSO link.
If your admin requires SSO for your account, you’ll first need to sign in to Box, and then sign in to your account:
Okta Sign In page for Box: Username field, Keep me signed in checkbox, and Next button.
After signing in, on the next page, enter the email address associated with your Box account. Clicking “Log In” will redirect you to your company or university login page. Enter your company or university credentials to log into Box.

Using SSO to log in to 3rd-party mobile apps

A majority of 3rd party applications and our OneCloud partners now support SSO and have a dedicated SSO login button labeled Use Single Sign On (SSO). If your company has SSO required, you can click on the SSO log in button and then enter your Box specific email address. This should then redirect you to your company login page, where you will need to log in with your company credentials. Follow these steps to log in with SSO:
  • Inside of the application you want to use, locate Box by looking for “App Integrations” or “Server Connections” and select the “Box” connection.
  • Depending on the application, you may be asked to enter your username (email address) before you can see the SSO login button.
SSO Login On 3rd Party Mobile Apps-1.png
  • Select “Use Single Sign On (SSO)”.
  • Enter your Box specific email address.
  • You will be redirected to your company login page. Enter your company credentials in order to gain access to your Box account.

SSO passkey authentication support

Passkey authentication as part of an SSO login flow is supported in the Box.com web application, but is not currently supported in the native Box mobile application. If your enterprise requires passkey authentication as part of its SSO flow on mobile devices, the current workaround is to enable the Mobile Native Browser Auth setting. This setting routes mobile SSO authentication through the device’s native browser instead of the in-app browser, which supports passkeys.
  • The Mobile Native Browser Auth setting is not compatible with Device Trust. This includes Device Trust in Audit Only (test) mode. If your enterprise has any Device Trust policy enabled, including Audit Only, disable or remove that policy before Mobile Native Browser Auth can be enabled.
  • To enable Mobile Native Browser Auth, contact Box Product Support.

Notes:

  • While the Box API supports SSO login, because of the customization that goes into setting up SSO, occasionally there are apps or SSO configurations that are not optimized for SSO login on mobile. If it does not work for an app, you will need to create a Box-specific password in your account settings to log in with.
  • SSO won’t work for any app using FTP.
  • 3rd Party App developers must also optimize their apps for SSO login, so you may see issues on an app-by-app basis.
  • If you are not able to log into your Box account from within a third party application, your admin may have disabled this application for the Enterprise from within the Admin Settings. You would have to contact your admin to have them enable the application for the Enterprise from within the Apps tab of the Admin Console.
Last modified on September 7, 2026