Skip to main content
Last updated on

Configure authentication to Box

Beta

This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for Box Audit Logs from the Previews page. See Manage Databricks previews.

Configure Box to enable authentication from Databricks for the Box Audit Logs connector. Use the credentials from these steps to create a Unity Catalog connection in Databricks.

Prerequisites​

  • Enable multi-factor authentication (MFA) on the Box account that creates the app. Box requires MFA before it shows the client secret on the Configuration tab. See Setup with Client Credentials Grant.
  • You must be an enterprise admin, or a co-admin with the Run new reports and access existing reports permission. The Events API requires this permission. See Get enterprise events.
  • For a co-admin, enable Run new reports and access existing reports in the Role and Access Permission section of the co-admin details page. See Co-admin permissions required to run reports.

Configure Box​

The connector authenticates with a Box Server Authentication app that uses Client Credentials Grant (CCG). See Setup with Client Credentials Grant.

  1. Sign in to Box and open the Developer Console.
  2. Select New App.
  3. Select Server as the app type.
  4. Leave Client Credentials Grant selected under Select Method.
  5. Select Create.
  6. On the Configuration tab, set App Access Level to App + Enterprise Access. The Manage enterprise properties scope requires App + Enterprise Access. See Scopes.
  7. Under Application Scopes, select Manage enterprise properties. This is the only scope the connector requires. See Get events.
  8. Select Save in the upper right.
  9. If App Details doesn't show Authorization as Authorized, authorize the app. Server authentication apps must be authorized before use. See Platform app approval.
    • If you are an enterprise admin or co-admin and the Configuration tab prompts you to authorize, authorize the app there.
    • If you are not an admin or co-admin, select Submit app for authorization when prompted. Then give an admin the Client ID.
    • As an admin, you can also authorize the app in the Admin Console. Select Platform in the left navigation, then Platform Apps. Select Add in the upper right, or select ... on the app row, then enter the Client ID.
  10. In App Details, under Access:
    • Copy the Client ID.
    • Select Fetch Secret. If Box asks you to sign in again, complete that, then copy the Client Secret.
  11. Select your account icon in the upper right, then select Copy Enterprise ID. See Locating IDs.

Next steps​

Create a Box Audit Logs connection in Databricks. See Create a Box Audit Logs connection.

On this page