Onboard Box AI Agents to SaaS Agent Security

1. Sign in to your Box instance.
2. From the left navigation pane, select Dev ConsoleCreate Platform AppCustom App.
3. On the Custom App page, enter the following information:

   • Give a suitable App Name.
   • Give a suitable Description (optional).
   • For Purpose, choose Automation from the drop-down and click Next.

   • Select Server Authentication (Client Credentials Grant) for authentication method and click Create App.

4. On the newly created app page, select the Configuration tab.
5. In the OAuth 2.0 Credentials section, copy the Client ID and the Client Secret (Fetch Client Secret) and keep it handy for use during onboarding.
6. In the App Access Level section, choose App+Enterprise Access.

7. In the Application ScopesContent Actions section, ensure you select the following checkbox options:

   • Read all files and folders stored in Box.
   • Write all files and folders stored in Box.
   • Manage AI.
8. Ensure you deselect all other checkbox options under Application ScopesAdministrative Actions and Application ScopesDeveloper Actions.
9. Save Changes.

10. Back on the newly created app page, select AuthorizationReview and Submit and Submit.

    Your new app moves to the Pending Authorization state.

11. Click Back to My Account on the left navigation pane and select Admin ConsoleIntegrationsPlatform Apps Manager.
12. On the Server Authentication Apps list, find the app you created and select ...Authorize AppAuthorize.

13. Go Back to My AccountDev Console and select the app you created.
14. Copy the Enterprise ID (available in the General Settings tab).

    Ensure you repeat the authorization process again if you modify any settings during configuration.
15. To start onboarding Box AI Agents to SaaS Agent Security, log in to Strata Cloud Manager.
16. Select InsightsSaaS AgentsAgent Platform OnboardingOnboard Agent PlatformBox AI Agents.

17. Ensure you have completed all the three steps mentioned in the following onboarding wizard and then Get Started.

18. On the Authorization Method Selection page, the API authentication method is selected by default. Click Next.

19. On the Onboard Agent Platform page, enter the following information (that you gathered in STEP 5 and STEP 14) and Complete.

    • Enterprise ID
    • Client ID
    • Client Secret

    SaaS Agent Security validates the credentials and permissions. After the validation is successful, you will see a confirmation message.
20. SaaS Agent Security immediately begins to scan your onboarded agentic platform after a successful validation.

    The amount of time SaaS Agent Security takes to scan varies based on the amount of data it is required to scan. At a minimum, it takes at least one hour to scan and display data in the SaaS Agent Security dashboard.