AgileBlue Cerulean AI can ingest activity logs generated by Box each time files are uploaded, accessed, or modified, allowing for 24/7 monitoring.
Additional Notes
- If your organization has opted in to receive additional events, this integration will allow AgileBlue Cerulean AI to ingest additional alerts and potential indicators of compromise.
- Box does not provide feature version numbers, meaning there is not a specific version this integration is compatible with.
Requirements
- Your admin account must have MFA enabled. This guide details the process to enable these settings.
Setup Steps
- Log in to the Box Developer Console as an admin (NOTE: The account must be an admin, not a co-admin)
- Click Create new App then select Custom App
- Click on Server Authentication (Client Credentials Grant)
- Enter an App name (Ex. agileblue-box-integration)
- Select Create App
- Once the application is created, select App + Enterprise Access under App Access Level
- Scroll to the Application Scopes section and select the following items under Administrative Actions:
- 'Manage users'
- 'Manage enterprise properties'
- Under Advanced Features, select the following value:
- 'Generate user access tokens'
- Click Save Changes
- Next, we'll need to submit the app for authorization by navigating to </> Dev Console in the left-hand menu
- Select your application and click on the extra Authorization tab which should now be visible
- Click Review and Submit
- Enter a comment explaining the changes then select Submit
- Log in to the Box Admin Console with an admin account
- Select Apps in the left-hand menu then click Custom Apps Manager
- Your app should now be visible under Server Authentication Apps and you should see Pending Reauth as the Authorization Status
- Click on the app and then click Authorize
- On the ensuing pop-up, click Authorize again
- Now, navigate back to the Box Developer Console, click on your app, and scroll to 0Auth 2.0 Credentials on the Configuration tab
- Copy your Client ID to a secure location
- In the same location, select Fetch Client Secret and complete the MFA prompt to copy your Client Secret to a secure location
- Navigate to the General Settings tab and scroll to App Info
- From here, copy the Enterprise ID to a secure location
- Securely send the following information to AgileBlue Support (support@agileblue.com)
- Client ID
- Client Secret
- Box Subject ID (same as Enterprise ID)
Need Help?
AgileBlue is always here to support you and ensure you are 100% successful. If there are any issues with the installation or if you have any questions, please reach out to AgileBlue Support.
Email: support@agileblue.com
Phone: (216) 606-9400🚨