Provisioning tool for Box "Hakonnect"

When operating Box, it is ideal to change the ID master according to changes in employee status and have it automatically reflected in all systems.

Task

• As a standard function of Box, the function of Active Directory linkage is not provided
• I want to separate the handling of leavers and retirees on the Active Directory side and on the Box side (disable the Box side, but leave Active Directory as it is, etc.)
• Box groups cannot have a hierarchical structure
• It is also necessary to create folders for individuals and departments and grant access rights.
• If the users on the Active Directory side and the Box side are not correctly linked, a new user will be created as a new user when the email address is changed on the Active Directory side.

Selectable configuration AD or CSV linkage

Reduce management man-hours by directly linking with AD (Macnica original)
If the information is not available in AD, it can be handled using CSV.
Because it is an in-house developed tool, it is highly flexible.

Minimize user impact

The user remains the same, and when only the email address is changed, the dress can be changed without affecting the user.

Support for temporary account deletion

Account can be deleted after 30 days after the information on the AD side is switched to "Retired"

Account management with data retention

Users on leave can be deactivated while leaving their accounts on the Box side

Support for group expansion

Expand provisioning target based on AD information when group is integrated

Customer A's voice

It was good to be able to create folders and change permissions in the Box environment with the rewriting of AD organization information as a trigger.

Customer B's voice

By avoiding CSV, etc. as much as possible, we were able to reduce the causes of maintenance man-hour reduction troubles as much as possible.

Customer C's voice

We adopted Hakonnect because it was able to handle the nested structure of AD organizations and groups and grant authority management.

Customer D's voice

It was good that we were able to respond to the request for irregular automation of processing for users who have retired or are on leave.

Automatic deletion of open links without a password "Hakomanager" *free of charge

• From Hakomanager on AWS, monitor events from Box at regular intervals and check for passwords in generated open links
• Unlock the open link if no password is given
• Send a cancellation notice (email) to the owner of the file

Prevention of conflict creation that occurs when files are opened at the same time "Hakodome" *free of charge

• Automatically lock/unlock files via BoxEdit, BoxDrive.
• File open: lock automatically
• File close: unlock automatically