Box

Box is a cloud content management and file sharing platform. This integration syncs managed users from your Box enterprise account into ZombieLicenseHunter for license tracking and access review. It connects through OAuth 2.0 using a Custom App that you create in your own Box Developer Console.

Prerequisites

  • A Box enterprise account, and an enterprise admin who will authorize the connection.
  • Access to the Box Developer Console to create a Custom App.
  • The public URL of your ZombieLicenseHunter instance, for the redirect URI.

Setup Instructions

Step 1: Create a Custom App in Box

  1. In the Box Developer Console, click Create New App and choose Custom App.

  2. For the authentication method, choose User Authentication (OAuth 2.0).

  3. On the app's Configuration tab, under Application Scopes, enable both of the following. They are the scopes ZombieLicenseHunter requests when it sends you to Box for consent:

    Scope Purpose
    manage_managed_users Read enterprise managed users
    manage_groups Read group memberships

  4. Under OAuth 2.0 Redirect URI, add:

    https://<your-zombielicensehunter-host>/integrations/box/callback

  5. Save, then copy the Client ID and Client Secret from the OAuth 2.0 Credentials section.

Step 2: Connect in ZombieLicenseHunter

  1. Go to Integrations → Add Integration and select Box. Leave Category as Application.
  2. Enter the Client ID and Client Secret from Step 1.
  3. Leave Enterprise ID blank. The field is shown on the form but the OAuth connection does not use it.
  4. Click Save Integration. You are redirected to Box.
  5. Sign in as a Box enterprise admin and grant consent for the two scopes.
  6. Box redirects you back to ZombieLicenseHunter. The authorization code is exchanged for an access token and a refresh token, your identity is confirmed, the integration becomes active, and the first sync is queued.

The refresh token keeps the connection alive without further sign-ins.

What Gets Synced

Field Source
User ID id
Email login
Status status
Created At created_at
  • Only managed users are synced (not external collaborators or app users).
  • Users with an empty login field are skipped.
  • Results are paginated at 1,000 users per page using offset-based pagination.

Troubleshooting

"Unauthorized" or 401 errors Verify the Client ID and Client Secret are correct and copied from the active app configuration, not a previous version.

No users returned Confirm the app has the manage_managed_users scope and that the account which authorized the connection is an enterprise admin.

Box shows a redirect URI error Ensure the redirect URI configured in the Box Developer Console exactly matches https://<your-zombielicensehunter-host>/integrations/box/callback, including the scheme and with no trailing slash.

Consent screen does not list both scopes Scopes are set on the app's Configuration tab and take effect the next time you authorize. Enable both, save the app, then disconnect and reconnect the integration.