Skip to main content
Question

Java SDK Enterprise and SSO

  • May 21, 2025
  • 2 replies
  • 9 views
C
Forum|alt.badge.img

We are a third party application and I managed to use the Java SDK to implement standard Oauth2 and content retrieval from Box.

I also managed to support BoxEnterprise using JWT  authentication mechanism. In this case our application holds the config.json and the user has to provide their user id.

A new category of clients use Box Enterprise with SSO and we need to add support for them. We can not find any example or documentation about how and if that could be done using Java SDK.

Is there any working example ?

 

Thank you

    2 replies

    C
    Forum|alt.badge.img

    The tutorial "Setting Up Single Sign On (SSO) for your Enterprise" states that

     

    IdP Requirements:

    • Must support SP initiated SSO
    • Must support SAML 2.0

     

    Currently Box does NOT support OAuth 2.0-based SSO.

     

     

    C
    Forum|alt.badge.img

     In general, API authentication should be totally separate from SSO.  If your application is using Standard OAuth2, then the user will go through the SSO flow in their browser/web view and your application will receive an auth code once they've entered their credentials.  If you're using JWT to generate access tokens for enterprise users, whether the enterprise uses SSO or not should be irrelevant to you generating the access token using your app auth credentials.

     

    Are you running into some specific problem integrating with an enterprise that uses SSO?

    Terms & ConditionsAccessibility statement