---
sourceDocument: Brazil Workflow Data Fabric
sourceDocumentLink: https://www.servicenow.com/docs/r/integrate-applications

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Workflow Data Fabric

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up the Box spoke

# Set up the Box spoke {#ariaid-title1}

Release version: Brazil  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read  
Integrate your ServiceNow instance and the Box APIs to automate the Box spoke actions. For example, you can set up a flow that removes a file in your Box account. When you set up the Box spoke, this flow is automated.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Box spoke.
* Access to Box developer's console.
* Role required: admin.
{#setup-box-spoke__ul_sh4_dtg_2hb}

## Create an OAuth application {#ariaid-title2}

Create a custom OAuth application from your Box account to enable OAuth 2.0 authentication with the Box spoke.

### Before you begin

Box requirements:

* Box account
* Box administrator credentials
* Role required: admin
{#configure-box-account__ul_nhk_cnh_gfb}

### About this task

Complete these steps from your Box account. See the [Box Developer
Portal](https://developer.box.com/) documentation for instructions on creating and configuring custom applications.

### Procedure

1. Log in to the [Box developer's console](https://app.box.com/developers/console).
2. Select Create New App.  
3. Select Custom App.  
4. Complete the form.  
   {#configure-box-account__table_am5_5bf_czb__entry__2}

   | Field | Value |
   |-|-|
   | App Name | <kbd class="ph userinput">Box App</kbd> |
   | Description (optional) | Leave this field empty |
   | Purpose | SelectCustom Portal |
   [ ]

   {#configure-box-account__table_am5_5bf_czb}
5. Select Next.  
   The Create a Custom App modal appears.
6. Select User Authentication (OAuth 2.0).
7. To confirm, select Create App.  
   You are in your application's configuration settings.
8. In the OAuth 2.0 Credentials section, copy the Client ID and Client Secret.  
   You need this information to register the application as a third-party OAuth provider on your ServiceNow instance.
9. In the Application Scopes section, enable the scope permissions you want to support.  
   {#configure-box-account__table_qlp_sqh_gfb__entry__2}

   | Application Scopes | Use for |
   |-|-|
   | Read and write all files and folders stored in Box | Document management, document sharing, and folder management actions |
   | Manage users | User management actions |
   | Manage groups | Group management actions |
   | Manage enterprise properties | Document sharing, group management, and user management actions |
   | Manage webhooks | Configuring V2 webhooks |
   | Manage AI | Interact with Box AI actions |
   [ ]

   {#configure-box-account__table_qlp_sqh_gfb}
10. Select Save Changes.

## Configure a connection for the Box spoke {#ariaid-title3}

Configure a connection to your Box account to authenticate ServiceNow requests. The Box spoke connection and credential aliases use this connection to perform actions in Box.

### Before you begin

Role required: admin

### Procedure

1. In your ServiceNow instance, navigate to AllProcess AutomationWorkflow Studio.
2. Click the Integrations tab.
3. Under Connections, toggle and enable the Outbound connections.
4. Locate the alias for Box_Upload and click View Details.  
   * To configure the default connection and credential alias record that is shipped along with the Box spoke, click View Details.

   * To manage more than one Box spoke connection records, you should create a new child alias record by clicking Add Connection. For more information about using multiple connections, see [Supporting multiple connections](https://www.servicenow.com/docs/D9pGgVwvfvFrzWX3lknyWg "Support several connections to a single integration provider. Select connections for flows, subflows, and actions directly from a flow.").

   {#box-basic-conf-temp__ul_rb41_w2e_pbc}

   If you are configuring the spoke for the first time, click Configure. Otherwise, click Edit.

5. On the Configure Connection form, fill in these fields:  
   {#box-basic-conf-temp__table_hjv_tsb_h2c__entry__2}

   | Field | Value |
   |-|-|
   | Connection Information ||
   | Connection Name | <kbd class="ph userinput">Box_Upload</kbd>. |
   | Connection URL | The instance URL in this format:<kbd class="ph userinput">&lt;provider-domain-name&gt;.net</kbd>. |
   | Credential Information ||
   | Credential Name | <kbd class="ph userinput">Box Upload Credentials</kbd>. |
   | OAuth Name | <kbd class="ph userinput">Box OAuth</kbd>. |
   | OAuth Client ID | The application client ID. For more information, see [Create an OAuth application](https://www.servicenow.com/docs/SZwrHh7QbrJVUELPe0BxIQ#configure-box-account "Create a custom OAuth application from your Box account to enable OAuth 2.0 authentication with the Box spoke."). |
   | OAuth Client Secret | The application client secret. For more information, see [Create an OAuth application](https://www.servicenow.com/docs/SZwrHh7QbrJVUELPe0BxIQ#configure-box-account "Create a custom OAuth application from your Box account to enable OAuth 2.0 authentication with the Box spoke."). |
   | OAuth Redirect URL | The URL in this format: <kbd class="ph userinput">https://&lt;ServiceNow-instance-name&gt;.service-now.com/oauth_redirect.do</kbd>. Replace <kbd class="ph userinput">&lt;ServiceNow-instance-name&gt;</kbd> with your ServiceNow instance name. |
   [ ]

   {#box-basic-conf-temp__table_hjv_tsb_h2c}

6. Click Save and Get OAuth Token.

### Result

The spoke connection is configured and ready to be used.  
Note:  
OAuth tokens expire after 30 days. An administrator can regenerate the spoke OAuth token every 30 days.

## Regenerate Box OAuth token {#ariaid-title4}

Regenerate the Box OAuth token when it expires. The Box spoke OAuth token expires every thirty days.

### Before you begin

Role required: admin

### Procedure

1. In your ServiceNow instance, navigate to AllProcess AutomationFlow Designer.
2. Select the Connections tab.
3. Search for the Box connection alias.
4. Select View Details.
5. Select Get OAuth Token for the connection.

### Result

The Box spoke receives a new OAuth access token. It expires in 30 days.

## Integrate ServiceNow instance with JWT Bearer grant type {#ariaid-title5}

Set up an OAuth provider with the JWT Bearer grant type to integrate your ServiceNow instance with Box.

### Before you begin

Role required: admin

### Procedure

1. Do the steps at the Box end.
   1. Sign Up for [Box Developer Account](https://developer.box.com).
   2. On the [Developer Console](https://app.box.com/developers/console), select Custom App.
   3. Confirm that the authentication method is OAuth 2.0 with JWT (Server Authentication).
   4. Enter a unique name for the app and create the app.
   5. View the app.
   6. On OAuth 2.0 Credentials, copy the Client ID and Client Secret.
   7. Create a new keystore and export a public key from that into BOX.
   8. Note the enterpriseID under the App Settings.
   9. Navigate to My apps\<App Name\>GeneralSubmit for Authorization.
   10. Select your account name on the top of the Admin Console.
   11. In your account, create a folder and upload a text file.
   {#integrate-servicenow-instance-with-jwt-bearer-grant-type__substeps_kbt_ctj_52c}
2. Do the steps at the ServiceNow instance end.
   1. Navigate to System DefinitionCertificatesNewTypeStorepass.
   2. Attach the keystore certificate.
   3. Configure a JWT signing key by navigating to System OAuthJWT KeysNew.
   4. Create OAuth application registry entry by navigating to System OAuthApplication RegistryNewConnect to a third party OAuth ProviderDefault Grant type ( JWT Bearer).
   5. Under the OAuth entity profile (oauth_entity_profile) associate the created 'jwt provider'.
   6. Create a REST message.
   7. In the REST Message, select Get OAuth token to get the access token.
   8. Go to the 'Default GET' method and click on 'Test'.
   9. An the BOX end, share the folder and file.
   {#integrate-servicenow-instance-with-jwt-bearer-grant-type__substeps_yr1_g5j_52c}

*[\>]: and then