Create a Custom App in Box Developer Console

To connect Box with StackOne, you need to create a Custom App with OAuth 2.0 authentication in the Box Developer Console. This will generate the Client ID and Client Secret required for integration.

Open your browser and navigate to Box Developer Console. Sign in with your Box account credentials.

Click the New App + button in the top right corner of the My Platform Apps page.

In the "Create a New App" dialog, provide the following details.

Enter a descriptive App Name for your application (e.g., StackOne Integration).
For App Type, select OAuth 2.0 from the dropdown menu.
Click Create App to proceed.

After creating the app, you'll be redirected to the Configuration page where you can view and manage your OAuth 2.0 credentials.

Locate the OAuth 2.0 Credentials section.
Copy the Client ID - you'll need this for StackOne configuration.
Copy the Client Secret - click the Copy button to securely copy the secret.

Configure the OAuth 2.0 redirect URI to allow Box to redirect users back to StackOne after authentication.

Scroll down to the OAuth 2.0 Redirect URIs section.
In the Redirect URI field, enter `https://api.stackone.com/connect/oauth2/box/callback`
Click the Add button to add the redirect URI to your app configuration.

Enable the required permissions for your Box application by selecting the appropriate scopes under Application Scopes.

Scroll down to the Application Scopes section.
Under Content Actions, ensure both Read all files and folders stored in Box and Write all files and folders stored in Box are enabled. Both Read and Write scopes must be selected to ensure a successful account connection.
Under Administrative Actions, enable Manage users, Manage groups, and Manage enterprise properties. These are required for a successful account connection, user and group management actions, and accessing enterprise event streams and attributes.

Click the Save Changes button in the top right corner of the Configuration page to apply all changes to your Box application.

OAuth Scopes

Box OAuth 2.0 scopes control what data and operations your application can access. You can configure custom scopes based on your integration requirements.

Review the available Box OAuth scopes to determine which permissions your integration needs.

root\_readwrite - Read and write all files and folders stored in Box (includes root\_readonly)
root\_readonly - Read all files and folders stored in Box
manage\_managed\_users - Manage enterprise users (create, update, delete users)
manage\_groups - Manage enterprise groups and group memberships
manage\_enterprise\_properties - View and manage enterprise properties and settings

Scope information for the Box integration.

If no scopes are specified during StackOne configuration, the integration will default to root\_readwrite manage\_managed\_users manage\_groups manage\_enterprise\_properties.
When specifying custom scopes, root\_readonly is required in order to connect the account.