---
title: "Box Enterprise"
slug: "box-enterprise"
description: "Learn how to connect Clarity Security to Box to automate your identity life cycle management and user access reviews. "
tags: ["connectors", "Application Marketplace", "Application Connectors"]
updated: 2024-10-01T20:23:58Z
published: 2024-10-01T20:23:58Z
canonical: "help.claritysecurity.com/box-enterprise"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Box Enterprise

This guide will show you how to set up the integration between [Box Enterprise](https://www.box.com/) and Clarity Security.

**Estimated time to complete:** 10 minutes

If you run into any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io).

### Endpoints:

Clarity uses the following endpoints for its API connection to Box Enterprise.

- /groups
- /users
- /users/{service_identifier}/memberships

---

## **Configuring in your Downstream Application**

**Step 1: Box login**

Navigate to [https://account.box.com/login](https://account.box.com/login) and login with an **Administrator** account.

**![Box Login page](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 1.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 2: Navigate to Dev Console**

From the login page, click the **Dev Console** button in the bottom left hand corner.

**![Box Dashboard](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 2.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 3: Create a New App**

Click the **Create New App** button in the upper right corner.

**![Box Developer Console > My Apps](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 3.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 4: Choose Custom App**

Choose the **Custom App** option.

**![Choose App Type](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 4.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 5: Name the new App**

Fill out the App Name and Description, we advise something descriptive involving the name Clarity.

**![Create Custom App Name and Description](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 5.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 6: Select Authentication Method**

Select the authentication method: **Server Authentication (Client Credentials Grant)**, then click **Create App**.

**![Select Custom App Authentication Method.](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 6.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 7: Collect Credentials**

Collect the **Client ID** and **Client Secret**, store these values securely as they will be needed in the following steps. You will need to click **Fetch Client Secret** to review the Copy button for Client Secret.

### **![Use Fetch Client Secret button to reveal Client Secret](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1726498782318.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)![Copy the Client ID and Client Secret for use later.](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 7B.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)**

**Step 8: Scope the Application**

Fill out the **Applications Scopes** described and depicted below, then click **Save Changes**. These scopes give Clarity the necessary permissions to View Users and their access, as well as add and remove Entitlements from users, and perform any deletion or deactivation actions as necessary. This is located in the **Dev Console**, choose your application, then the **Configuration** tab.

**Application Scope:**

- Read all files and folders stored in Box
- Manage users
- Manage groups
- Manage enterprise properties

![Application Scope selection screen for custom app](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Scope the Application(1).png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 9: Configure App Access Level**

Choose **App + Enterprise Access** in the **App Access Level** section of the **Configuration** tab.

![Set the App Access Level](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1727813793464.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 10: Collect the Enterprise ID**

Collect the **Enterprise ID** from the App that you created. This is located in the Dev Console, choose your application, then the **General Settings** tab.

![Dev Console > App General Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Get Enterprise ID(1).png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 11: Navigate to Admin console > Apps**

Navigate to the **Admin Console**, then to the **Apps** page. You may need to head back to your dashboard/main page to see the **Admin Console** button (see image in **Step 2**, bottom left corner).

![Box Enterprise Admin Console > Apps button](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 9(1).png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 12: Navigate to Custom Apps Manager**

Click on the **Custom Apps Manager** button near the top middle of the page.

![Admin Console > Apps > Custom Apps Manager button near top middle](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 10.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 13: Add the new Custom App**

Click the **Add App** button in the top right corner to add the Custom App you just created. **Client ID** (from **Step 7**) will be required in the next step.

![Custom Apps Manager > Add App button](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 11.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 14: Provide the Client ID**

Copy and paste the **Client ID** you obtained above (in **Step 7**) to add this application to your Box Enterprise tenant.

![Enter the Client ID from Step 7](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 12.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 15: Review & Authorize**

Review the details of the custom app you created above, then click **Authorize**.

![Review the details of the custom app before adding to your tenant.](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Step 13.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

## **Configuring the** **Integration** **within Clarity**

**Step 1: Login to your Clarity Security tenant**

> https://your-tenant.claritysecurity.io/

**Step 2: Click on Applications, then Marketplace**

![Applications > Marketplace](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679588491503.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 3: Find Box Enterprise**

Scroll to or search for **Box Enterprise** in the list of applications from the marketplace, then click **Connect App**.

![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Box Enterprise Marketplace.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 4: Connect App**

Complete the **Connect App** form. Details for fields common to all applications can be found at the following article: [Common App Configuration Steps](/docs/common-app-configuration-steps)

- **client_id:** This is **Client ID** collected in **Step 7**.
- **client_secret:** This is **Client Secret** collected in **Step 7**.
- **box_subject_id:** This is **Enterprise ID** collected in **Step 9**.

![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Box 14.png?sv=2026-02-06&spr=https&st=2026-11-10T01%3A32%3A04Z&se=2026-11-10T02%3A32%3A04Z&sr=c&sp=r&sig=omoJEApyCEXRvxrG1bqW2JLZrrSkvi3QvHX4lawul9Y%3D)

**Step 4: App Settings**

Complete the **App Settings** form. Details for each field can be found at the following article: [Common App Configuration Steps](/docs/common-app-configuration-steps)

**Step 5: User Settings**

Complete the **User Settings** form. Details for each field can be found at the following article: [Common App Configuration Steps](/docs/common-app-configuration-steps)

**Step 6: Validate Your Selections and Save**

Validate the selections from Configure App Step 3, and hit the **Save** button.

Save

Clicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing). This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes.

## Need Help?

If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST.

A Downstream Application is any application that supplies Clarity with service users, entitlements, and attributes.

An Integration is any application, service, or data source used in Clarity for pulling in information about your users and their access.

A Service User is a user, or service account, discovered by Clarity in a downstream application.

An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies.

Service User Entitlements are the pairings of users and active entitlement access in downstream applications.

An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc.