Setting Up Box Platform to Work with Axonius

Before connecting Box Platform in Axonius, follow these steps:

Create an Application

📘

Note

Only users with a Developer account can create an application.

The values supplied in Client ID and Box Platform private key configuration file refer to the generated Client ID and private key configuration file of your Custom App.

  1. For details on setting up a Custom App using JWT authentication, see Box Guides - Setup with JWT. The following App Scopes (permissions) are required for creating a Custom App:
    • Read and write all files and folders stored in Box
    • Manage groups
    • Manage enterprise properties
    • Manage users
  1. Select Configuration from the left sidebar in your application, scroll down to App Access Level, and select App + Enterprise Access. This enables your application to access all users and manage enterprise settings, content, and users.
AppAccessLevel
  1. Create a configuration file from the Developer Console. This file will include the keypair as well as a number of other application details that are used during authentication.

    1. Select Configuration from the left sidebar in your application and scroll down to Add and Manage Public Keys. AddAndManagePublicKeys
    2. Click Generate a Public/Private Keypair to have Box generate a keypair. This triggers the download of a JSON configuration file that you can move to your application code.
    3. Upload this file as the Box Platform private key configuration file.
  2. To get the Client ID, log into your Box developer console and select Edit Application for the application you're working with.

  3. In the OAuth 2.0 Parameters section of the configuration page, find the item labelled client_id. The text of that item is your application's Client ID.

Create a User Account

💡

Notes

  • This step required only to fetch some Application Settings. While to access Application Settings data you need to grant roles and/or permissions that include write capabilities, the adapter only actually reads data from the application.

  • It is recommended for the username and password to be derived from a newly created user account dedicated for the usage of Axonius SaaS Applications. Retrieve the username and password from that user account.

  • When single-sign-on is enabled, and direct login flow is disabled, then it is recommended to derive the username and password from a user account maintained by the single-sign-on solution.

  1. Log into Box as an administrator and navigate to Admin Console> Users & Group.

  2. Click the + User button.

  3. Clear Allow this user to sync files between Box and the user's desktop.

  4. Click Add User.

  5. Look up for the newly created user, click on its options button, and select Change User Settings.

  6. Check Exempt this user from maximum allowed devices.

  7. Check Exempt this user from 2-step login verification.

  8. Check User is granted the following administrative privileges.

  9. Clear the following:

    1. Manage users
    2. Manage groups
    3. View users' content
    4. Edit users' content
    5. Log in to users' accounts
    6. Create, edit and delete automations for your company
    7. Create and edit metadata templates for your company
  10. Check the following:

    1. View settings and apps for your company
    2. Edit settings and apps for your company
    3. Run new reports and access existing reports
    4. View automations set up for your company
  11. Click Save.


Did this page help you?