Box SaaS Ops Integration

Auvik SaaS Management’s integration with Box allows you to automate common employee lifecycle tasks - granting and revoking access to the applications when needed to ensure compliance and give techs time to work on higher value tasks. 

For frequently asked questions about Box SaaS Ops Management, click here.

For how to uninstall Box SaaS Ops Management, click here.

Prerequisites

Before installing the Box integration, ensure that you have:

• Required Auvik SaaS permissions to install integrations
  • From the Partner Hub: Default Admin
  • From the Client Hub: Client Admin
• A valid account for Box with any necessary administrative privileges required
• An active subscription for Box
• Any necessary API keys or access tokens (if applicable)

We recommend using a dedicated account with all integrations. This allows you to set a role with minimal permissions. The integration will stop working if this user’s account in Box is deactivated.

Configuration & Setup

The Box integration can be configured using OAuth2 protocol or Client credentials. 

Required Account Permissions; 

• Read files and folders
• Read and write files and folders
• Manage app users
• Manage users
• Manage groups
• Manage webhooks v2
• Generate billable Box Sign requests. Refer to your Box subscription plan for details. 

If Authenticating using OAuth; 

1. Select Configure - no additional customizations required 
2. Click Connect
3. You’ll be directed to login to Box in a new browser tab
4. Log in with an account that has administrator privileges
5. Grant permissions to Workato if asked

If you have configured the integration successfully you will be taken back to Auvik Saas Management and the Integration will showcase as Connected. 

If using Client credentials;

Box must be configured with 2FA in order to create Access Tokens. Box allows an Access Token to be refreshed by using the Refresh Token that came with the Access Token. This can be done before or after the Access Token expires. There are specific limitations and expiry parameters for Refresh Tokens (currently: 1 time use with 60 day expiry). 

1. Create Custom App with Box
   1. Navigate to Box Dev Console > My Platform Apps 
   2. Select Create Platform App > Custom App
   3. Enter an App Name and optional description
   4. Select Automation in the Purpose dropdown 
   5. Select User Authentication (OAuth 2.0) > Create App
   6. Once created, scroll to OAuth 2.0 Credentials - Client ID and Client Secret will be used in the Integration Setup
   7. Scroll down to Application Scopes to ensure the following permissions are enabled; 
      • Read files and folders
      • Read and write files and folders
      • Manage app users
      • Manage managed users
      • Manage groups
      • Manage webhooks
      • Manage enterprise properties
      • Manage retention policies
      • Global content manager
      • Admin can make calls on behalf of users
      • Manage signature requests
      • Manage Box Relay

2. Based on your authentication Subject Type you’ll need the following information from the Available under General Settings tab to complete the Integration Setup
   1. Subject Type: Service Account requires Enterprise ID 
   2. Subject Type: Managed User requires User ID 
3. Complete the Box app authentication process for your created Client Credentials 
4. Complete the Integration Setup form for Box using the information you collected from the Dev Console
5. Select Configure

If you have configured the integration successfully you will be taken back to Auvik SaaS Management and the Integration will showcase as Connected. 

How to Leverage Box with SaaS Ops

Review step by step instructions and any additional information specific to this integration including some FAQs. 

1. Onboarding
2. Offboarding

Available Functionality

Offboarding

• Deactivate User: Change the user’s status to inactive while retaining their data.
• Delete User: Permanently removes the user and optionally transfers their content during the process.

Onboarding

• Add User

To add managed users, you must be: An Admin or A Co-Admin with the Manage users permission enabled.