Skip to main content

Box Events Integration

AgileBlue Cerulean AI can ingest activity logs generated by Box each time files are uploaded, accessed, or modified, allowing for 24/7 monitoring.

Additional Notes

  • If your organization has opted in to receive additional events, this integration will allow AgileBlue Cerulean AI to ingest additional alerts and potential indicators of compromise.
  • Box does not provide feature version numbers, meaning there is not a specific version this integration is compatible with.

Requirements

  • Your admin account must have MFA enabled. This guide details the process to enable these settings.

Setup Steps

  1. Log in to the Box Developer Console as an admin (NOTE: The account must be an admin, not a co-admin)
  2. Click Create new App then select Custom App
  3. Click on Server Authentication (Client Credentials Grant)
  4. Enter an App name (Ex. agileblue-box-integration)
  5. Select Create App
  6. Once the application is created, select App + Enterprise Access under App Access Level
  7. Scroll to the Application Scopes section and select the following items under Administrative Actions:
    1. 'Manage users'
    2. 'Manage enterprise properties'
  8. Under Advanced Features, select the following value:
    1. 'Generate user access tokens'
  9. Click Save Changes
  10. Next, we'll need to submit the app for authorization by navigating to </> Dev Console in the left-hand menu
  11. Select your application and click on the extra Authorization tab which should now be visible
  12. Click Review and Submit
  13. Enter a comment explaining the changes then select Submit
  14. Log in to the Box Admin Console with an admin account
  15. Select Apps in the left-hand menu then click Custom Apps Manager
  16. Your app should now be visible under Server Authentication Apps and you should see Pending Reauth as the Authorization Status
  17. Click on the app and then click Authorize
  18. On the ensuing pop-up, click Authorize again
  19. Now, navigate back to the Box Developer Console, click on your app, and scroll to 0Auth 2.0 Credentials on the Configuration tab
  20. Copy your Client ID to a secure location
  21. In the same location, select Fetch Client Secret and complete the MFA prompt to copy your  Client Secret to a secure location
  22. Navigate to the General Settings tab and scroll to App Info
  23. From here, copy the Enterprise ID to a secure location
  24. Securely send the following information to AgileBlue Support (support@agileblue.com)
    1. Client ID
    2. Client Secret
    3. Box Subject ID (same as Enterprise ID)

Need Help?

AgileBlue is always here to support you and ensure you are 100% successful. If there are any issues with the installation or if you have any questions, please reach out to AgileBlue Support.

Email: support@agileblue.com 
Phone: (216) 606-9400🚨