> For the complete documentation index, see [llms.txt](https://www.cakewalk.security/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.cakewalk.security/docs/human-access/connections-and-integrations/integration-guides/box.md).
# Box
Set up Box Auto Provisioning with an admin account, Google or Microsoft sign in, plus how to add the MFA secret.
### :sparkles: Auto Provisioning
| **Authentication method** | Email & password, [`Sign in with Google`](/docs/human-access/how-to-guides/auto-provisioning/how-it-works/sign-in-with-google.md) or [`Sign in with Microsoft`](/docs/human-access/how-to-guides/auto-provisioning/how-it-works/sign-in-with-microsoft.md). |
| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Required permissions** | `Admin`, or `Co-admin` with permission to manage users |
| **Required metadata** | None |
| **MFA** | Required if `2-step verification` with an authenticator app is on for the account. Setup details [here](#how-to-enable-mfa). |
{% hint style="info" %}
**Signing in with Google:** if your Box admin account signs in through Google, choose **Sign in with Google** on the Sign-in method step and pick a connected account. Cakewalk opens the Box login page and uses `Sign in with Google` there. Leave the `MFA Secret` empty on this path. See [Sign in with Google](/docs/human-access/how-to-guides/auto-provisioning/how-it-works/sign-in-with-google.md).
{% endhint %}
{% hint style="info" %}
**Signing in with Microsoft:** this works when your company's Box signs the admin account in through Microsoft Entra single sign on. Choose **Sign in with Microsoft** on the Sign-in method step and pick a connected account. Cakewalk enters the admin account's email on the Box login page, and Box sends it on to Microsoft. If Box asks for a password instead, single sign on is not set up for that account and the connection fails. Leave the `MFA Secret` empty on this path. See [Sign in with Microsoft](/docs/human-access/how-to-guides/auto-provisioning/how-it-works/sign-in-with-microsoft.md).
{% endhint %}
How to enable MFA
1. Go to [app.box.com](https://app.box.com/folder/0) and click your avatar in the top right corner.
2. Click `Account settings`.
3. Under `2-step verification`, click `Set up`.
4. Select `Authenticator app` and click `Next`.
5. Box shows a QR code with a secret key below it. Copy the secret key. Keep this window open.
6. In Cakewalk, open the Agent Cake setup for Box, turn on `Multi-Factor Authentication` and paste the secret key into the `MFA Secret` field.
7. Click the copy icon next to the `One-Time Password` that appears below.
8. Go back to Box, paste the code into the `Verification Code` field and click `Submit`.
9. Box asks for a mobile phone number for account recovery. Enter a number your company controls and click `Submit`.
10. Click `Close`, then go back to Cakewalk and click `Save & Enable`.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://www.cakewalk.security/docs/human-access/connections-and-integrations/integration-guides/box.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.