Select Box UI Elements (Content Explorer, Content Picker Content Preview, and Content Uploader) are offered as Salesforce Lightning Components. To set them up in Experience Cloud requires the following:
- Box Developer, to Create and set up your Box Custom App
- Box Admin, to Authorize your Custom App
- Salesforce Admin, to Connect and set up your Custom App to Box for Salesforce
(Box Developer) Create and set up your Box Custom App
As a Box Developer, from the Box Developer Console, create a (or use an existing) Custom App. For more information on creating a Custom App, click here.
- This App must use the Server Authentication (with Client Credentials Grant).
- Note down your Client ID and Client Secret. You can find this in [Your App’s name] > Configuration tab > OAuth 2.0 Credentials section.
Note: If you are fetching a Client Secret for the first time, you will need to enable 2FA.
- In the App Access Level section, select App + Enterprise Access.
-
In Application Scopes, check all the applicable scopes. At a minimum, the App will need to:
- Read/write files and folders,
- Manage users and groups, and
- Generate user access tokens.
- (Optional) In Advanced Features, modify as needed.
-
In CORS Domains:
- Add your custom Experience site url,
- Add your Builder url.
- Click Save Changes.
- Finally, in the Authorization tab, send your App to your Box Admin to authorize. For more information, click here.
(Box Admin) Authorize your Custom App
As the Box Admin, authorize the Custom App created by the Box Developer above. For more information, click here.
(Salesforce Admin) Connect and set up your Custom App to Box for Salesforce
As the Salesforce Admin, you will need to authenticate your Box Service Account, connect your Custom App to Box for Salesforce, assign permissions for users, and set up the Secure Website Access and Trust Management section in Experience Builder.
To authenticate your Box Service Account:
- From the App Launcher, search for and navigate to Box Settings.
- In Quick Setup, next to Sign In to Box Service Account, click Connect.
- Sign in to your Box Service Account.
- The Box Service Account needs to own or have sharing access to any folders and/or files used in Box UI Elements in order for App users to access that content, or
- When designating a file/folder, use a Box shared link that is in the same organization as the Service Account.
To connect your Custom App:
- Navigate back to Box Settings.
- Expand Advanced Setup, and next to Experience Cloud, click Configure.
- In the Box Client Configuration section, fill in your Box Custom App’s Client ID and Client Secret. (From the Box Developer in Step 2 above)
- Click Save.
To assign permissions to your users:
- In Enable UI Elements, for App users, click Manage Assignments.
- Then proceed to assign the permission sets to your users.
To set up your Secure Website Access and Trust Management:
- From Salesforce Experience Builder, click the Settings button.
- Select the Security & Privacy tab.
- In Clickjack Protection Level, select Allow framing by any page (No protection).
- In Security Level, select Relaxed CSP: Permit Access to Inline Scripts and Allowed Hosts.
-
In Trusted Sites for Scripts:
- Add your custom Experience site url,
- Add your Builder url.