Enforce two-factor authentication for external shares

When accessing shared items, you can enforce two-factor authentication (2FA). This works similarly to the global two-factor authentication requirement that you can enforce for members of your organization.

The setting can be configured individually for each share. You can define the default value (enabled or disabled) at the space level. There, you can also adjust the setting for all shares within the space at once.

How to enable the setting for each individual share

1. Open the Box settings.
2. Click the box name. You will be taken directly to the box management page in DeepAdmin.

3. Click Shares and then «Invite / Share».

4. The “Add Share” window opens. Click “Security Settings“. Enable the option requiring additional authentication (2FA or SSO) for shared items.
5. You will then see an overview indicating which users are required to complete an additional login using 2FA or SSO.

How to manage the setting for each individual sections

1. Open the Box settings.
2. Click on«Manage Sections» in the top-right corner. You will be taken directly to the area management section in DeepAdmin.
3. Select the desired section.
4. Enable the option requiring an additional login (2FA or SSO) for shared items.
5. Optional: Apply the setting to existing shares as well.

Impact on Share Recipients

If the setting also applies to existing shares, the access requirements for recipients will change. The specific impact depends on how the recipient is currently authenticated:

• 2FA or SSO login already enabled: Nothing changes for these recipients.

• Neither 2FA nor SSO login enabled: They must first enable two-factor authentication and log in again before they can access the shared item.

• New users: They enable two-factor authentication directly when creating their account.