Set up the Box spoke

Integrate your ServiceNow instance and the Box APIs to automate the Box spoke actions. For example, you can set up a flow that removes a file in your Box account. When you set up the Box spoke, this flow is automated.

Avant de commencer

• Request an Integration Hub subscription.
• Activate the Box spoke.
• Access to Box developer's console.
• Role required: admin.

Create an OAuth application

Create a custom OAuth application from your Box account to enable OAuth 2.0 authentication with the Box spoke.

Avant de commencer

Box requirements:

• Box account
• Box administrator credentials
• Role required: admin

Pourquoi et quand exécuter cette tâche

Complete these steps from your Box account. See the Box Developer Portal documentation for instructions on creating and configuring custom applications.

Procédure

1. Log in to the Box developer's console.
2. Select Create New App.
   
3. Select Custom App.
   
4. Complete the form.

   Field	Value
   App Name	Box App
   Description (optional)	Leave this field empty
   Purpose	SelectCustom Portal

5. Select Next.
   The Create a Custom App modal appears.
6. Select User Authentication (OAuth 2.0).
7. To confirm, select Create App.
   You are in your application's configuration settings.
8. In the OAuth 2.0 Credentials section, copy the Client ID and Client Secret.

   You need this information to register the application as a third-party OAuth provider on your ServiceNow instance.

9. In the Application Scopes section, enable the scope permissions you want to support.

   Application Scopes	Required for...
   Read and write all files and folders stored in Box	Document management, document sharing, and folder management actions
   Manage users	User management actions
   Manage groups	Group management actions
   Manage enterprise properties	Document sharing, group management, and user management actions
   Manage webhooks	Configuring V2 webhooks

10. Select Save Changes.

Configure a connection record for the Box spoke

Add and configure a Box connection to authenticate ServiceNow requests in a Box spoke.

Avant de commencer

Role required: admin

Procédure

1. In your ServiceNow instance, navigate to All > Process Automation > Workflow Studio.
2. Click the Integrations tab.
3. Under Connections, toggle and enable the Outbound connections.
4. Locate the alias for Box and click View Details.
   • To configure the default connection and credential alias record that is shipped along with the Box spoke, click View Details.

     

   • To manage more than one Box spoke connection records, you should create a new child alias record by clicking Add Connection. For more information about using multiple connections, see Supporting multiple connections.

   If you are configuring the spoke for the first time, click Configure. Otherwise, click Edit.

   

5. On the form, fill these values.

   Field	Value
   Connection Name	Box.
   Connection URL	The instance URL in this format:<provider-domain-name>.net.
   Credential Name	Box Upload Credentials.
   OAuth Name	Box OAuth.
   OAuth Client ID	The application client ID. For more information, see Create an OAuth application.
   OAuth Client Secret	The application client secret. For more information, see Create an OAuth application.
   OAuth Redirect URL	The URL in this format: https://<ServiceNow-instance-name>.service-now.com/oauth_redirect.do. Replace <ServiceNow-instance-name> with your ServiceNow instance name.

   

6. Click Configure Connection.

Résultats

The spoke connection is configured and ready to be used.

Remarque :

OAuth tokens expire after 30 days. An administrator can regenerate the spoke OAuth token every 30 days.

Regenerate Box OAuth token

Regenerate the Box OAuth token when it expires. The Box spoke OAuth token expires every thirty days.

Avant de commencer

Role required: admin

Procédure

1. In your ServiceNow instance, navigate to All > Process Automation > Flow Designer.
2. Select the Connections tab.
3. Search for the Box connection alias.
4. Select View Details.
5. Select Get OAuth Token for the connection.

Résultats

The Box spoke receives a new OAuth access token. It expires in 30 days.

Integrate ServiceNow instance with JWT Bearer grant type

Set up an OAuth provider with the JWT Bearer grant type to integrate your ServiceNow instance with Box.

Avant de commencer

Role required: admin

Procédure

1. Do the steps at the Box end.
   1. Sign Up for Box Developer Account.
   2. On the Developer Console, select Custom App.
   3. Confirm that the authentication method is OAuth 2.0 with JWT (Server Authentication).
   4. Enter a unique name for the app and create the app.
   5. View the app.
   6. On OAuth 2.0 Credentials, copy the Client ID and Client Secret.
   7. Create a new keystore and export a public key from that into BOX.
   8. Note the enterpriseID under the App Settings.
   9. Navigate to My apps > <App Name> > General > Submit for Authorization.
   10. Select your account name on the top of the Admin Console.
   11. In your account, create a folder and upload a text file.
2. Do the steps at the ServiceNow instance end.
   1. Navigate to System Definition > Certificates > New > Type > Storepass.
   2. Attach the keystore certificate.
   3. Configure a JWT signing key by navigating to System OAuth > JWT Keys > New.
   4. Create OAuth application registry entry by navigating to System OAuth > Application Registry > New > Connect to a third party OAuth Provider > Default Grant type ( JWT Bearer).
   5. Under the OAuth entity profile (oauth_entity_profile) associate the created 'jwt provider'.
   6. Create a REST message.
   7. In the REST Message, select Get OAuth token to get the access token.
   8. Go to the 'Default GET' method and click on 'Test'.
   9. An the BOX end, share the folder and file.