Integrating Box with Drata automates your user access reviews, saving time and reducing errors by syncing user data directly from Box.
Prerequisites
Ensure that your Box account has Admin privileges and has 2-Step Verification enabled in your Box Account Settings.
Create a Box OAuth Application and copy your client ID and secret. You will need these values to connect to Drata.
Log in to your Box account and navigate to the Dev Console.
In the My Platform Apps page, select the Create Platform App button near the top right.
Select Custom App for the application type.
Enter the application details.
App Name: Enter the application name.
Purpose: You must select Automation.
Select User Authentication (OAuth 2.0) for the Authentication Method.
Select Create App.
Scroll down to the OAuth 2.0 Credentials section, and copy your Client ID and store it safely.
Select the Fetch Client Secret button. This may prompt you for your 2-Step Verification code.
Your Client Secret will now be displayed. Copy this and store it safely to be used during the connection process.
Scroll down to the Oauth 2.0 Redirect URIs section and enter the following Redirect URI:
https://api.stackone.com/connect/oauth2/box_iam/callback
Scroll down to the Application Scopes section and select the following scopes:
Read all files and folders stored in Box
Manage users
Manage groups
When complete with the previous steps, save your changes.
If your organization uses a web application firewall (WAF), make sure you allow the following IP addresses to ensure successful connection.
Enable Box
Select Connections on the side navigation menu.
Select the Available connections tab, search for Box, and select Connect.
Follow the instructions on the connection drawer.
After you select connect to Box, on the popup modal, enter the required fields with the values that you obtained from the previous section.