Multi Tenant Application Design with Box

Good afternoon ,

I understand that your application will be published on the BOX apps list and the authentication will be based on OAUTH 3-legged? So you will be using the authenticated managed users and not application users.

If that is right, then the structure where the content will be created is based on the specific user granting access to his/her folder structure. 

Thanks

Users of my application will not need to enter Box credentials or even know that my application is using Box.

Good morning ,

then, if you don't want the user to authenticate the only alternative I see is that you do a mapping between real users and application users (authenticating those via JWT).

You would need to know each user to which company belongs and use different authentication jsons.

Your application will need to be authorized at box instance level.

Thanks

 as  explained, you will have to chose to authenticate a user with Box or not.

If you were to authenticate a user (ideally a Box admin, but any user will do) then you can store content in that user’s enterprise. If that user is an admin, there are possibility to then share that content with other users in that enterprise as well.

If you don’t want to expose to your users that Box is being used, then you need to store all data with your enterprise. You could set up an App User for each of your clients, and then store the data for that client within the folders owned by that App User.