Require MFA for all External Collaborators

Question

I recently required MFA for all collaborators upon sign in, but it appears that they are still allowed to disable MFA from within their account's settings. How can I disable their ability to remove MFA? It should be required for all external collaborators.

Eric Levinson · Answer

Yes, a user can remove MFA anytime they wish, however as soon as they access a folder from a tenant that has MFA enabled, they will be prompted to register MFA device and won’t be permitted to enter.

Please note MFA is actually set on a tenant level, not a user level. Users may have access to many different tenants, all with different 2FA and password rules.

Sign up

Community access is available only with a Box Account.

Sign in to the Box Community

Community access is available only with a Box Account.