Box Platform

Hello! I’ve seen documentation stating that the Box Visualforce page is available on custom object, but it is only available on the account object. How should I proceed in order to make it available on custom objects or even objects like Opportunities or Contacts?

Hello Team,We have successfully configured the Box Authorization Service and are able to collect data from Box accounts that have a small number of collaborators (less than 5).However, when attempting to collect from accounts with a large number of collaborators (for example, 92K or 140K), the collection fails after about 5–10 minutes with the following error:Error: “Error loading evidence file”Upon logging the exception details, we observed the following:Exception Type: System.Net.WebExceptionMessage: The operation has timed outDetails: Box Authorization Service: Configured and validated successfully Works as expected for low collaborator counts Fails consistently for high collaborator counts (tens of thousands) Error occurs during the collection phase after several minutes Exception indicates a possible timeout or performance limitation Request for Guidance: Are there known limitations or thresholds in Box when handling accounts with a very large number of collaborators? An

After authenticate the user using authorization url, I’m obtaining refresh token and access token using following method in my Android project(Kotlin). private suspend fun exchangeCodeForToken(code: String): JSONObject? { return withContext(Dispatchers.IO) { val form = FormBody.Builder() .add("grant_type", "authorization_code") .add("code", code) .add("client_id", CLIENT_ID) .add("client_secret", CLIENT_SECRET) .build() val req = Request.Builder() .url(TOKEN_URL) .post(form) .build() httpClient.newCall(req).execute().use { resp -> val body = resp.body?.string() if (resp.isSuccessful && body != null) { JSONObject(body) } else { Timber.e("Token exchange failed: ${resp.code} - $body") null } }

Hello Team,We have successfully configured the Box Authorization Service and are able to collect data from Box accounts that have a small number of collaborators (less than 5).However, when attempting to collect from accounts with a large number of collaborators (for example, 92K or 140K), the collection fails after about 5–10 minutes with the following error:Error: “Error loading evidence file”Upon logging the exception details, we observed the following:Exception Type: System.Net.WebExceptionMessage: The operation has timed outDetails: Box Authorization Service: Configured and validated successfully Works as expected for low collaborator counts Fails consistently for high collaborator counts (tens of thousands) Error occurs during the collection phase after several minutes Exception indicates a possible timeout or performance limitation Request for Guidance: Are there known limitations or thresholds in Box when handling accounts with a very large number of collaborators? An

Hello,My JWT Service Account cannot access folders that were shared with us from outside our organization.Setup:- Box Enterprise account- Custom App with JWT Server Authentication- App configured with App + Enterprise Access- App is authorized by enterprise adminThe Problem:Service Account can create and access its own folders but gets 404 error when trying to access externally shared folders by ID What I Tried:- Verified App + Enterprise Access is enabled- Confirmed app is authorized in Admin Console- Invited Service Account as collaborator on the shared folder- Verified all application scopes are enabledExample:Accessing Service Account own folder works fine.Accessing externally shared folder ID ...2037 returns 404 Not Found.How do I make this work?Thanks for any help. 

I read the below aritcle. It’s awesome!!https://blog.box.com/box-community-mcp-server-updates-you-didnt-know-you-neededI have two questions:the authentication parameter is --box-auth, not --auth, right? I can’t connect n8n MCP Client that’s endpoint is set to http://0.0.0.0:8001/sse. I need set it to http:host.docker.internal:8001/sse. do you use a local docker and a local mcp server or not? If I set Authentication parameter “None”, the MCP Client can’t connect local MCP Server. the local MCP server displays the below error: WARNING:middleware:No token configured, rejecting all requests INFO:     127.0.0.1:53381 - "GET /sse HTTP/1.1" 401 Unauthorized   

I am trying to run self hosted mcp server using CCG but to get tokens I need a server authentication app to run it on an azure web app as a container. My account is on box free trial.Issue-I can’t authorize the platform app as server authentication. Would be also interested to know what solution other people came up with to get pass this obstacle.

I updated a Python environment this afternoon and my code using boxsdk stopped passing validation. The environment claiming that “boxsdk is not present,” despite it being installed. I then noted the module version had jumped from 3.14.0 to 10.0.0. I reverted to 3.14.0 and the code again passed validation. Suspicious?

Hi everyone,I'm trying to integrate Box with WatsonX Orchestrate, and I’ve run into an issue I hope someone can help me with.Here’s my setup:I created a Box application using OAuth 2.0 with Client Credentials Grant (Server Authentication). The application has already been approved by the Box administrator. I’m attempting to connect this Box app to WatsonX Orchestrate. However, when I try to establish the connection from WatsonX Orchestrate, I get the following error:redirect_uri_mismatchI understand that this error typically means the redirect URI used in the authentication flow doesn’t match what’s registered in the Box Developer Console. But since I’m using Client Credentials Grant, there shouldn’t be a redirect URI involved, right?Has anyone successfully connected Box to WatsonX Orchestrate using this method?Do I need to configure a redirect URI anyway, or is there something specific WatsonX expects?Any guidance or examples would be greatly appreciated. I’d love to learn from others

Hello, I am wondering if anyone can explain a bit more about how the ftp server add on works. (https://support.box.com/hc/en-us/articles/ [removed by moderator] -Using-Box-with-FTPS , https://app.box.com/integrations/box_ftp_server/) I have a client that still uses FTP to upload images to an online platform. It would be great if I could share with them the proper use of this addon. They need to be able to send images or the contents of a folder from their box.com account directly to the external platform via FTP. The functionality I’m looking for is as follows: Images from my clients box account ---->FTP ---> external site platform Can anyone tell me how much this addon costs? I have been having difficulty finding a price. Any details would be greatly appreciated.

I’m using the Box Sign API to send a signature request using the POST /sign-requests endpoint:https://developer.box.com/reference/post-sign-requests/I’ve included HTML-formatted text in the email_message field so the email content appears styled (e.g., bold text, line breaks, etc.).The email is received correctly — the formatting in the email appears to be fine. However, in the signature request view, the email text is displayed with raw HTML tags instead of being rendered as formatted text.Is there a way to make the HTML render properly in the signature request, or does the API only support plain text for this field?Thanks in advance for your help! 

Hello, I am new to developing for the Box platform and having a hard time understanding the first steps. I went through Getting started with Box for Salesforce development: Part 1 and Part 2, but they are using the box Toolkit which doesn’t offer the full API functionality. I’ve installed the Box SDK in my Salesforce Sandbox but there’s so many classes and seemingly no guide for how to get started. Can I use the box.Toolkit along with the SDK? My initial tasks will be to maintain a folder structure separate from the default to hold archived files, and to push files into this separate folder structure. 

We are using Box from the user's perspective. We have an Enterprise license.It seems that the SFTP feature has been implemented, so I tried to check the connection because I want to use it for our regular operations, but it appears to be denied with 'Permission denied'.I would like to contact the Box administrator, but is there any permission setting that needs to be configured on the administrator side?ー　ー　ーboxをユーザ側の立場で利用しています。enterpriseライセンスです。SFTPの機能が実装されたということで、普段の運用業務で利用したいと思い接続確認してみましたが、Permission deniedで拒否されてしまうようです。box管理者に問い合わせしたいのですが、管理者側で何か許可設定をする必要はあるのでしょうか。

I’m an admin trying to transfer files from one user who has left our organization to her supervisor… however… I am getting an error "Source User is locked" with the API or “...is in another operation” when attempting to move files or change the folder owner in Box -- it’s been several days and it just never changes. I’ve tried several things and tried waiting for days -- but this is just a weird account that won’t budge.

I’m using Box SDK python package for development. Since the developer token is valid for only 60 minutes, I need to refresh once it’s expired. How to refresh developer token with Box SDK automatically so that my service can run without manually interrupted? Thanks.

Hi all — looking for guidance and confirmation on a BC/DR pattern for Box SSO.Current state (redacted): Box Enterprise with SAML SSO enabled. Primary IdP = a third-party SAML provider (not Okta). “SSO Required” is OFF so password logins remain possible. Two Box admin accounts have SSO bypass enabled and strong passwords (tested at https://account.box.com/login). A standby Okta SAML configuration is pre-staged in Enterprise Settings → Authentication (uploaded Okta IdP metadata & SHA-256 signing cert). Okta app uses NameID = EmailAddress; app username = email; standard givenName/sn claims. No change to the production IdP yet—we only want an emergency fallback. SCIM provisioning from Okta is not enabled (SSO only). What we want to do during an IdP outage: Admins enter via password (SSO bypass). Optionally flip SSO Provider in Box from the primary IdP → Okta to keep SSO for users. Keep SSO Required = OFF during the flip; validate with pilots; later flip back to the prim

I’m trying to confirm whether or not Box development could support setting up an SFTP server with Elliptic Curve Digital Signature Algorithm (ECDSA), such as using Server-side authentication using JSON Web Tokens (JWT).  And if so can anyone estimate the effort and/or point me to relevant examples or docs? I know that SFTP is supported with a user password (not SSO) per Box docs, but the financial services client I’m working has security stipulations allowing SFTP but only with key pair authorization (ECDSA preferred). I’m otherwise looking at setting up a basic Azure blob storage SFTP but they don’t support ECDSA specifically, and our teams already use Box for internal project document storage and sharing, so Box would be a preferred method for us if it’s possible. Overall goal is to be able to securely share files back and forth with external clients without requiring Box user licenses and access for those clients individual team members for short-term projects (their security team w