Box Platform

We are using Box with SSO set to Required and MFA is enforced at our IdP.When trying to view or regenerate a client secret (Client Credentials Grant) or generate a JWT key pair in the Developer Console, Box requires that the user has Box 2-Step Verification enabled.However, when SSO is Required, the Box-native 2-Step Verification setting is not available in the user’s security settings.Questions: Can IdP-side MFA be recognized by Box as satisfying the “2-Step Verification” requirement for Developer Console operations? If not, is it impossible to regenerate client secrets / JWT key pairs in an SSO Required environment without temporarily disabling SSO? Is there an official workaround or supported procedure for this scenario? We want to avoid relaxing SSO policies in production if possible.

When I search up a folder, I get results:The “Leases_Batch_1” is in a subfolder of “Nextpoint - Barings Loan” called “Leases”. When I try to search for the exact same query, one folder down, I get no results.Seems to behave the same using the API setting AncestorFolderIds. Any thoughts or work arounds would be greatly appreciated. If I be this much more specific with my search, I’m far more likely to get an accurate result.Thanks!

I have been attempting to initiate a DocGen process through the API, and am being met with a 403 error indicating insufficient permissions. According to the developer console, ‘Manage Doc Gen’ is checked and enabled. I even forced a token refresh to see if that would make things update. Those efforts have had no effect, and the 403 error is still present. Are there any further steps I can take?The error response in full:{"message":"Insufficient permissions: Document Generation scope not enabled for this OAuth application","status":"error","fileId":null}The app’s service account is the one performing the action, and I have verified that it has access to all of the relevant folders and files the call is attempting to interact with.

We are facing intermittent slowness of downloads and uploads of files to and from box folders. For time period like 6.00 AM to 10.00 AM IST ( 00:30 UTC to 04:30 UTC) we faced slowness multiple times. It does not seem to be related to throttling or rate limiting as no feedback received from the box server side. Download takes very long time and some times timesout. How to troubleshoot this ? How to conclude if it is box side issue or any other dependencies ?

Our application was impersonating an account that had viewer uploader permissions on a folder in Box and was able to delete a file thru the API (not Web UI).My understanding was a viewer uploader did not have delete permissions.  Is that in the Web UI only?

Hey there! My organization uses box to store all our files and such. Locating files new and old can be really difficult on box which has been slowing down efficiency and files are getting lost. I noticed a ton of integrations that are created to help solve this but was curious if anyone has used any and seen success? I am specifically interested in integrations that are secure, low cost or free.  Thanks!

I’m currently developing a PHP application that uploads and downloads files to and from a folder in Box. I’ve created a Box App, and it has been approved and enabled by the administrator.However, when I look at the Developer Console, it still appears that the app is not enabled. administrator console : developer console : In fact, when the application attempts to perform JWT authentication, I get the following error:GuzzleHttp\Exception\ClientException: Client error: `POST https://api.box.com/oauth2/token` resulted in a `400 Bad Request` response:{"error":"invalid_grant","error_description":"Please check the 'sub' cla

After configuring a Box app in my Box Dev console, installed the Box CLI tools and, following the steps in documentation, eventually get to the step where you enter the command:box login -n BoxCLIafter which I’m prompted to enter the client id/secret for my app. After doing so I get the error “signalExit is not a function.” I’ve tried many variations of these steps and rebooted multiple times but always get this same error.

I’ve spent the better part of the last month trying to give Box money for AI credits. Not negotiating, not asking for special pricing, just attempting to purchase what’s already advertised. I’ve been connected to multiple reps, each saying they’ll get back to me, and then… nothing.To be clear, Julianna has been great and has actively tried to escalate this on my behalf. The issue is that Joanna, who is supposedly the person responsible for actually enabling or providing the credits, has been completely unresponsive and unhelpful.This isn’t a feature request or a product complaint. It’s friction in the purchasing process itself. If a motivated customer actively trying to pay can’t get credits after weeks of follow-ups, that feels like something worth flagging.Curious if anyone else has run into this, or if there’s a clearer path I’m missing.

For a number of years (and in fact, one of the reasons we started with box), we allowed our students to set an external alias in their box account, and when the student leaves, if they have an external email alias, rather than deleting their account, we “release” it to then.We do this (via the API) by setting their “login” to the external email alias, and then setting “enterprise” to null. Recently, we have been having issues with the process (we only do expires once or twice a year, so it may have been broken for a while). The API call is returning:{ "type": "error", "status": 400, "code": "bad_request", "context_info": { "errors": [ { "reason": "invalid_parameter", "name": "user", "message": "Invalid value 'Box_User [removed by moderator] '." } ] }, "help_url": "http://developers.box.com/docs/#errors", "message": "Bad Request", "request_id":

I’m a dev at a video production company. We want to programmatically understand when editors have uploaded new drafts into certain folders in box, but when they use applications like Adobe Media Encoder/Adobe Premiere to render video directly to a folder in Box Drive, Box Drive uploads the file incrementally as it's being written, as it doesn’t understand when the file is fully rendered and ready to be properly uploaded. This triggers multiple FILE.UPLOADED webhooks throughout the render process.For example, when rendering 592.4 MB file, I received 3 FILE.UPLOADED payloads at   - 0.09 MB   - 184.77 MB  - 592.4 MB (render actually complete + fully uploaded)Am I correct that the best workaround for this issue (for assets that generate thumbnails according to https://developer.box.com/guides/

Hey folks,Im under free developer license, trying to build app, which will access box to upload download files. I cannot use OAuth, since this is part of pipeline flow. And I have to use box, since it’s part of SONY automation portal I’m getting error ‘*BoxOAuthException**: Message: Please check the 'sub' claim. The 'sub' specified is invalid.Status: 400’Is this because my enterprise account = 0? If so, any ways I can use JWT with free licence? Or what tier do I need to carry?

Hello! I'd like Salesforce field values to pull into the document template dynamically so that the completed document is specific to the client and the values entered in Salesforce. I'd then like to send that document for signature via Adobe Sign that is integrated through Box. Ideally, everything done within the Salesforce UI. I'm not finding specific documentation for this (probably since it’s across 3 different tools).  Any insights would be helpful! Thanks,Stephanie

HelloI’m trying to integrate Box into my app for file storage. I think I want JWT Auth as the app will only ever store files in its own Box account. I’m getting a typescript error: Type '{ clientId: string; clientSecret: string; jwtKeyId: string; privateKey: string; privateKeyPassphrase: string; enterpriseId: string; }' is missing the following properties from type 'JwtConfig': tokenStorage, privateKeyDecryptor with the following code: const config = { clientId: BOX_CLIENT_ID, clientSecret: BOX_CLIENT_SECRET, jwtKeyId: '8495cr9l', privateKey: Buffer.from(BOX_PRIVATE_KEY_BASE64, 'base64').toString('ascii'), privateKeyPassphrase: BOX_PASSPHRASE, enterpriseId: BOX_ENTERPRISE_ID,}const jwtAuth = new BoxJwtAuth({config})

I’m trying to send a sign request using a template and it doesn’t seem to be working - the recipient is not getting the email invite.I also tried sending an invite via api with the new Box Developer Playground (with an embed link) and even though the response is 200 OK and the sign request status is “created” the returned embed_url doesn’t work properly - when I use the link the sign page shows a message “Invalid Link”.It worked fine earlier today, is anyone else experiencing the same issue?

If you have been to developer.box.com in the last few minutes, you may notice a lot has changed. We are now live on Mintlify! All the guides and API reference materials you are used to are there. But with Mintlify, the site is built on AI. Thing are now much easier to find, and with the AI Assistant, you don’t even have to find it. Check out all the improvements in this blog.There are more improvements coming, but check it out and let us know what you think!

Hi!I’ve created a custom app using client credentials. After authorizing the app, I noticed that the automation user has a default storage limit of 10 GB.I attempted to increase the storage by first retrieving the user ID via the endpoint “api.box.com/2.0/users/me”, and then sending a PUT request to “api.box.com/2.0/users/{id}”.However, I received a 403 error:error="insufficient_scope", error_description="The request requires higher privileges than provided by the access token."I also verified the app permissions and confirmed that “Manage users” is enabled.Any suggestions on what might be causing this issue?Thanks in advance!

I’m trying to find a way to trigger some automations when a tag is added to a file or folder. I saw this post: and understand there is not currently a webhook event that can do this, but I’m wondering if anyone has figured out a clever workaround? It doesn’t look like there are any Relay events associated with tags either. I see that there is a “TAG_ITEM_CREATE” event type in the Events endpoint: https://developer.box.com/guides/events/, but only by user (i.e., there’s no way to filter enterprise events by that event type)?

Application that persists User Access and Refresh token works with .Net SDK v10.1.0, fails with :"The given key 'Retry-After' was not present in the dictionary" error at System.ThrowHelper.ThrowKeyNotFoundException[T](T key)   at System.Collections.Generic.Dictionary`2.get_Item(TKey key)   at Box.Sdk.Gen.BoxRetryStrategy.RetryAfter(FetchOptions fetchOptions, FetchResponse fetchResponse, Int32 attemptNumber)   at Box.Sdk.Gen.Internal.BoxNetworkClient.<Box-Sdk-Gen-INetworkClient-FetchAsync>d__3.MoveNext()   at Box.Sdk.Gen.Managers.FoldersManager.<GetFolderByIdAsync>d__8.MoveNext()   at Program.<<Main>$>d__0.MoveNext() in C:\Users\xxxxx\source\repos\BoxTestTokenStore\Program.cs:line 28 A sample console test app code fragments to recreate: Simple Model for token persistence:namespace BoxTestTokenStore{    internal class TokenData    {        public string Access

When I click 'Run App Diagnostic Report', it gives me an error saying 'Something went wrong. The report did not initiate.' 

Hello, I am new to developing for the Box platform and having a hard time understanding the first steps. I went through Getting started with Box for Salesforce development: Part 1 and Part 2, but they are using the box Toolkit which doesn’t offer the full API functionality. I’ve installed the Box SDK in my Salesforce Sandbox but there’s so many classes and seemingly no guide for how to get started. Can I use the box.Toolkit along with the SDK? My initial tasks will be to maintain a folder structure separate from the default to hold archived files, and to push files into this separate folder structure. 

This is an old question from stackoverlow which uses boxselect aka box file picker popup. The usage is very simple and straight forward but very old. But when i went through the dev docs none of them showed how to use the box file picker only using client id. Below example shows only via access token. In integration apps page it mentions “strongly recommend that you do not send it to an end-user client for both primary and secondary access token”https://developer.box.com/guides/embed/ui-elements/picker/#sample-html if I use the client id in above example, no files are loaded. Now how do i integrate box in my web app. 

Our in-house service implements a Python SDK for creating folders and uploading files to BOX. User inputs consist of the target BOX folder path and the file to be uploaded. We execute the Python SDK using the "API execution account" provided by the user and upload the file to BOX. The processing logic works as follows: when the input folder path is "/Test/User", we first check if a "Test" folder exists at the root of the "API execution account". We then verify if a "User" folder exists directly under "Test", and if it does, we upload the file to that "User" folder. If "User" does not exist, we create it directly under "Test" and then upload the file. For example, if both "Account1" and "Account2" create folders named "Test" and grant collaboration access to the "API execution account", the root of the "API execution account" will display two "Test" folders. In this scenario, when the input folder path is "/Test/User", the "API execution account" cannot determine which "Test" folder

The API that I use is this :{{BASE_URL}}/enterprise_configurations/{{ENTERPRISE_ID}}?categories=user_settings,securityAnd I always have 404 response.  I have made sure the enterprise scope is present in token. Infact I tried to login from my docs using same oauth and receive 404 so is it something that needs to be enabled in account?