Enquiry: Configure Box for Salesforce

👋 Hi ​@Mandeep M, thanks for reaching out.

It is not possible to configure the integration to use a single shared/common Box Service Account for all Salesforce users to access their personal Box content.

Here is a breakdown of how the integration’s authentication model is structured and why individual logins are required:

1. The two-account architecture requirement

The Box for Salesforce integration relies on two distinct types of accounts that must remain discrete:

• Box Service Account: This is a single, dedicated Box account (typically a managed user like boxforsalesforce@example.com) configured by the Salesforce Administrator. It is used exclusively to manage the integration, own the Salesforce content structure on Box, and make API calls from Salesforce to Box on behalf of the entire enterprise.
• Box User Account: This represents each individual Salesforce user’s personal Box account. Every end user must log in with their own Box credentials to link their Salesforce account to their individual Box account.
   

2. Why a single shared account cannot be used for Users

• No multi-linking: You cannot connect a single Box account to multiple Salesforce users. The integration explicitly enforces a 1:1 relationship between a Salesforce user and a Box user. Attempting to log multiple users into the same Box account will result in the error: “This Box Account is already linked to Salesforce user” (as documented in Box for Salesforce - "This Box Account is already linked to Salesforce user").
• Service Account restrictions: You cannot set the Box Service Account to be the same account as an active Box User Account. Attempting to do so triggers the error: “You can not set the Box service account to the same account as an existing user” (as documented in Box for Salesforce - "You can not set the Box service account to the same account as an existing user.").
   

3. ✅ Recommended solution: enable seamless login

If your goal is to reduce the friction of requiring users to manually enter their Box credentials repeatedly, Box provides a feature called Seamless Login:

• How it works: When Seamless Login is enabled org-wide by an administrator, users only need to log into their Box accounts once during initial setup. In subsequent Salesforce sessions, they are automatically authenticated and do not need to log in again.
• Admin Delegated Authorization: Additionally, Box supports Admin Delegated Authorization, which allows Box Admins to authorize the integration for all or select users enterprise-wide, eliminating the manual OAuth flow for end users entirely when combined with Seamless Login.

Thanks, and let us know if you have any other questions.