Join BoxWorks in San Francisco Nov 12-13! Keynotes, product demos, and Box Master Classes. Reserve your spot!

Box status
Print

Using Multizones SSO version 2

I made this version from scratch.  I copied the original text from the Community article (NOT the Lithium Edit window), and pasted the text into Notepad to remove proprietary HTML tags.
Then I pasted the text from Notepad to here, formatted the text, and added the images from my local drive.
The results look good, and the HTML is clean.

 

WRITER'S NOTE:

At GA, publish this new article here: https://community.box.com/t5/How-to-Guides-for-Admins/tkb-p/howtoguideadmins and position it adjacent to the Introducing Box Zones article.

 

The Box Multizones SSO feature integrates Box's Multizones feature with SSO functionality to enable you to quickly and easily assign users to specific data residency Zones, and update these assignments.


Box Multizones SSO enables you to streamline your enterprise's onboarding process. When people join your enterprise, Multizones SSO eliminates the need for you to repeatedly run scripts and maintain a file of user-to-Zone mapping for assigning new accounts to Zones on an on-going basis. After you use the admin console to map your enterprise’s location attributes to Zones, when an account holder uses SSO to sign in, Box automatically maps the account to a Zone according to the account's location attribute.

 

AdminConsole-ZonesSSO_77424.png

 

 

Setting up Multizones SSO

To set up Multizones SSO, provide your enterprise's SSO attributes and Zone mapping to Box Consulting.

 

Assigning attribute values to a Zone

After Box configures Multizones SSO for your deployment, you're enabled to assign location attribute values to Zones. After you assign location attributes to Zones, when an account holder signs in, Box assigns the account to a Zone based on the account's location attribute.

 

 

AdminConsole-AssigningZones_77424.png

 

 

To assign locations to a Zone:

  1. In the admin console's left sidebar, click Enterprise Settings.
  2. In the top of the window, click User Settings.
  3. In the Configure Zones Assignment with SSO section, click in a Zone's text field and type the comma-separated list of locations you want to assign to that Zone.
  4. In the top-right corner of the User Settings window, click Save.

Each time an account holder signs in, Box checks the assigned Zone.

  • If you've assigned the person to a different Zone, Box updates your enterprise's SSO configuration and also logs the update. Box logs these events in both the Managed Users report and the User Activity report.
  • If an account assigned to a Zone has an invalid or missing location attribute, the person can still sign in, but Box does not update the account's Zone assignment.

 

Notes
If you do not assign an account to a Zone, Box assigns the account to your enterprise's default.

 

IMPORTANT Row 6, Column 1
If you want to update your available Zones — delete Zones, or add new Zones — be sure to work with your account team so Box can provision new Zones accordingly.

Tip Row 6, Column 6
If you want to update your available Zones — delete Zones, or add new Zones — be sure to work with your account team so Box can provision new Zones accordingly.

Tip Row 6, Column 6
If you want to update your available Zones — delete Zones, or add new Zones — be sure to work with your account team so Box can provision new Zones accordingly.