Box

Overview

Connect your users to Box for enterprise file storage, collaboration, and content management.

Property	Value
Provider ID	box
Category	Storage
PKCE	Not supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a Box OAuth App

Go to the Box Developer Console

Navigate to app.box.com/developers/console and sign in.

Create a new app

Click Create New App then Custom App. Select User Authentication (OAuth 2.0).

Add the redirect URI

Under Configuration, add the Redirect URI from the Developer Portal to the Redirect URIs field.

Get credentials

Copy the Client ID and Client Secret.

Warning

Never share your Client Secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Box provider

Go to OAuth Providers > Add Provider > Box.

Enter credentials

• Client ID: Paste your Box Client ID
• Client Secret: Paste your Box Client Secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
root_readwrite	Read and write access to all files and folders
root_readonly	Read-only access to all files and folders
manage_managed_users	Manage enterprise users
manage_groups	Manage enterprise groups

Notes

• Box scopes are configured at the application level in the Box Developer Console.
• See the Box OAuth documentation for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
post_comments	send	POST	/comments
post_invites	admin, send	POST	/invites
post_users_id_email_aliases	admin, send	POST	/users/{user_id}/email_aliases
put_comments_id	send	PUT	/comments/{comment_id}
put_users_id_folders_0	admin, payment	PUT	/users/{user_id}/folders/0
delete_ai_agents_id	delete	DELETE	/ai_agents/{agent_id}
delete_collaboration_whitelist_entries_id	delete	DELETE	/collaboration_whitelist_entries/{collaboration_whitelist_entry_id}
delete_collaboration_whitelist_exempt_targets_id	admin, delete	DELETE	/collaboration_whitelist_exempt_targets/{collaboration_whitelist_exempt_target_id}
delete_collaborations_id	delete	DELETE	/collaborations/{collaboration_id}
delete_comments_id	delete	DELETE	/comments/{comment_id}
delete_device_pinners_id	delete	DELETE	/device_pinners/{device_pinner_id}
delete_file_requests_id	delete	DELETE	/file_requests/{file_request_id}
delete_files_id	delete	DELETE	/files/{file_id}
delete_files_id_metadata_enterprise_securityClassification-6VMVochwUWo	delete	DELETE	/files/{file_id}/metadata/enterprise/securityClassification-6VMVochwUWo
delete_files_id_metadata_global_boxSkillsCards	delete	DELETE	/files/{file_id}/metadata/global/boxSkillsCards
delete_files_id_metadata_id_id	admin, delete	DELETE	/files/{file_id}/metadata/{scope}/{template_key}
delete_files_id_trash	delete	DELETE	/files/{file_id}/trash
delete_files_id_versions_id	delete	DELETE	/files/{file_id}/versions/{file_version_id}
delete_files_id_watermark	delete	DELETE	/files/{file_id}/watermark
delete_files_upload_sessions_id	delete	DELETE	/files/upload_sessions/{upload_session_id}
delete_folder_locks_id	delete	DELETE	/folder_locks/{folder_lock_id}
post_files_id_metadata_id_id	admin, write	POST	/files/{file_id}/metadata/{scope}/{template_key}
post_folders_id_metadata_id_id	admin, write	POST	/folders/{folder_id}/metadata/{scope}/{template_key}
post_metadata_taxonomies_id_id_levels	admin, write	POST	/metadata_taxonomies/{namespace}/{taxonomy_key}/levels
post_metadata_taxonomies_id_id_nodes	admin, write	POST	/metadata_taxonomies/{namespace}/{taxonomy_key}/nodes
put_files_id_metadata_id_id	admin, write	PUT	/files/{file_id}/metadata/{scope}/{template_key}
post_file_requests_id_copy	write	POST	/file_requests/{file_request_id}/copy
post_files_id	write	POST	/files/{file_id}
post_files_id_content	write	POST	/files/{file_id}/content
post_files_id_copy	write	POST	/files/{file_id}/copy
post_files_id_metadata_enterprise_securityClassification-6VMVochwUWo	write	POST	/files/{file_id}/metadata/enterprise/securityClassification-6VMVochwUWo
post_files_id_metadata_global_boxSkillsCards	write	POST	/files/{file_id}/metadata/global/boxSkillsCards
post_files_id_upload_sessions	write	POST	/files/{file_id}/upload_sessions
post_files_id_versions_current	write	POST	/files/{file_id}/versions/current
get_comments_id	read	GET	/comments/{comment_id}
get_file_requests_id	read	GET	/file_requests/{file_request_id}
get_file_version_legal_holds_id	read	GET	/file_version_legal_holds/{file_version_legal_hold_id}
get_file_version_retentions_id	read	GET	/file_version_retentions/{file_version_retention_id}
get_files_id	read	GET	/files/{file_id}
get_files_id_app_item_associations	read	GET	/files/{file_id}/app_item_associations