Onboard Box

Follow the instructions below to set up Box for Netskope SaaS Security Posture Management.

Prerequisites

• A Box account with one of the following licenses: Business, Business Plus, Enterprise, or Enterprise Plus.
• A Box admin or co-admin user account.

Procedure

Step 1: Assign Co-Admin User Permissions

Follow the procedure to assign the required permissions to a co-admin user to grant access to Netskope configuration. Skip this step if you are using the Box admin user for onboarding Netskope.

1. Log in to your Box account as an enterprise admin user.

2. Navigate to Admin Console.

3. Navigate to Users and Groups > Managed Users.

4. Select a co-admin user from the list, or select the desired user and change the role to co-admin.

5. In Role and Access Permissions, click Edit.

6. Under Reports and Settings, enable the following permissions:

   • View settings and integrations for your company: Enable this permission to allow the co-admin to grant Netskope access to your Box account.

   • Edit settings and integrations for your company: Enable this permission to allow the co-admin to install and authorize the JSON Web Token (JWT).

     

7. Click Save.

   You may remain logged in as an admin or log in as a co-admin before proceeding.

Step 2: Authorize Netskope App on Box Admin Console

1. Log in to your Box account as an admin or co-admin.
2. Navigate to Admin Console.
   
3. Navigate to Integrations and go to Platform Apps Manager tab.
   
4. Click Add Platform App (+ symbol).
5. In Client ID field, enter 3ffau6fkvclyerc87okszntquufizdg2 Netskope SSPM JWT App key.
   
6. Click Next to review the app’s permission scopes.
   
7. Click Authorize.
8. Repeat steps 4 to 7 and use Ipds86lv92ah6lssuvz0gt80c2xx356e Netskope SSPM User Grant App key in Step 5.
   
   

Step 3: Configure Netskope to Access your Box Account

1. Log in to the Netskope tenant UI and go to Settings > Configure App Access > Next Gen > SECURITY POSTURE.
2. Under Apps, select Box and click Setup Security Posture Instance. The Setup Instance window opens. 
   
3. Enter the admin user’s email under Administrator Email to authorize apps.
4. Select the Security Scan Interval.
5. (Optional) Enter an Instance Name.
6. Click Grant Access.
   
7. Click Grant Access to Box. When the configuration results page opens, click Close.
8. Refresh your browser, and you will see the instance.

References

• Scope Required for Box
• Feature Matrix
• SaaS Security Posture Management Policy Wizard
• Understanding DOM Files