Box Connector

Used for OneTrust Data Discovery, the Box.com connector connects to the Box cloud file sharing system and can be used to scan file system information directly from Box.

Pod Residency

storage-scanner

Connection Method

OAuth 2.0 with JSON Web Tokens (Server Authentication)

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

Any Box account that needs to connect to the OneTrust Scanner requires a custom application with admin privileges and JWT token authentication. Click here for more information on creating custom apps with Box.

{
    "clientID": "your_client_id",
    "clientSecret": "your_client_secret",
    "publicKeyID": "your_private_key_Id",
    “passphrase“: ”passphrase”,
    "privateKey": "your_private_key",
    "enterpriseID": "your_enterprise_id"
}

Using the Box connector, OneTrust will be able to catalog and scan the Box objects listed below:

Field

Description

Allowed Roles

The types of roles that a user can be invited as.

Classification Definition

The Box description for the classification applied.

Classification Name

The name of the Box classification applied to the file.

Comment Count

The number of comments on the file.

Content Created Date

The created date of the file or folder originally outside of Box.

Content Modified Date

The modified date of the file or folder outside of Box.

Content Type

The document type of the file.

Created By

The unique ID of the file.

Created Date

The creation date of the file or folder in Box.

Description

The optional description for the file or folder.

Expires Date

The expiration date of the file or folder.

File Extension

The extension of the file (.pdf, .csv, etc.)

Is Externally Owned

Determines if the file or folder is owned by an external user.

Item Status

The status of the file or folder, includes active, trashed, or deleted.

Last Modified Date

The modified date of the file or folder in Box.

Modified By

The user who last modified the file.

Name

The name of the file or folder in Box.

Owner

The Box user who owns the file or folder.

Parent Folder

The parent folder for the file.

Path

The full path of the object, includes:

• Folder

• File

Purged Date

The purged date of the file or folder.

Reference Id

The unique ID of the Box file or folder.

SHA1 Hash

The hash code of the file.

Shared Access

For files and folders, we apply the following to the shared access attribute in this priority order:

• Open Access - If someone can access the file or folder with no restriction with a hyperlink.

• Shared External - The file or folder is shared externally via collaboration to a user outside your box account.

• Shared Internal - The file or folder is shared internally via collaboration to a user inside your organization.

• Private - The file or folder is not shared by the file owner.

Shared Link Access

The access level for the shared link.

Shared Link URL

The URL of the shared link associated with a file or folder.

Size on Disk

The size of the file or folder (bytes) populated from Box.

Sync State

The state of the sync from a user's device to a folder.

Tags

The Box tags applied to the file or folder.

Trashed Date

The trashed date of the file or folder.

Type

The type of object which includes file or folder.

Upload Email Access

The access level of the upload email for the folder.

Upload Email

The upload email address for the folder.

Uploader Name

The uploader's name.

Users

The user's id and email.

Version

The version number of the file.

ETag

The HTTP entity tag of the file or folder.

Suppression of notifications should be enabled in the Box Server before this data source is executed for the first time. Ensure that you are logged in as an Enterprise user when completing these tasks.

The following settings are required for your application to leverage this feature:

Can suppress email notifications from API calls

: Contact Box Support for assistance. You will need to provide the following, which can be obtained via the authorized application settings:

CODECopy

CLIENTID = "xxxxxxx"; ENTERPRISEID = "xxxxx";

CLIENTID = "xxxxxxx";
ENTERPRISEID = "xxxxx";

Manage Enterprise Properties

: Available via the developer console under the authorized application's Configuration tab.

Edit settings for your company

: Specify co-admin permissions under "Users & Groups > Roles and Access Permissions" in the console. Update user access permissions toEdit settings and apps for your companyonly.

The OneTrust Data Discovery project suppresses notifications by default. If you want to enable these notifications, you will need to update the Credentials JSON by making enableNotifications as true.

{
  "clientID": "xxx",
  "clientSecret": "xxx",
  "connectionUrl": "na",
  "enterpriseID": "xx",
  "passphrase": "xxx",
  "privateKey": "-----BEGIN ENCRYPTED PRIVATE KEY-----\nMIIFDjBABgkqhkiG9w0BBQ0w\n-----END ENCRYPTED PRIVATE KEY-----\n",
  "publicKeyID": "xxx",
  "enableNotifications": "true"
}