Managing custom apps

Only primary admins and co-admins with the correct permissions can access this area of the Admin Console.

Box Platform enables you to build custom applications on the Box platform, seamlessly integrating the full power of Box with your solutions.  You can allow the use of these custom applications in your enterprise by enabling or authorizing them through the Admin Console.

Authorizing and enabling custom applications

Using the Admin Console, you can

• authorize and enable custom server authentication apps, such as JSON Web Token (JWT) apps, client credential apps, and limited access apps,
• enable custom user authentication applications, such as OAuth 2.0 apps, and
• enforce global custom app controls.

To authorize or enable a custom server authentication app:

1. Open your Admin Console.
2. In the left sidebar, click Apps.
3. In the top of the window, click Custom Apps Manager.
4. Click Server Authentication Apps. Box displays information about these available apps, including their authorization states and enablement states.
5. Hover on the name of an app and click View.  Box displays authorization and enablement options.
6. Check the authorization and enablement options you want to apply, then click Apply.

To enable or disable a custom user authentication app via admin console: 

1. Open your Admin Console.
2. In the left sidebar, click Apps.
3. In the top of the window, click Custom Apps Manager.
4. In the top-right corner of the window, click Add App then enter the user authentication application client ID.
5. Click User Authentication Apps. Box displays information about these available apps, including their enablement states.
6. Click an application, then select the state you want to apply. 
7. Click Apply.

To enable or disable a custom user authentication app via an emailed request:

1. Open the email requesting enablement.
2. In the email, click Review App Details. Box displays information about the application.
3. Check the enablement options you want to apply, then click Apply. 

Enforcing global custom app controls

For both custom server authentication apps and custom user authentication apps, you can enforce global settings to

• disable published third party applications by default,
• disable authorized unpublished applications, and
• require admin approval for each custom application seeking transactional access to accounts in your enterprise.

To enforce global custom app controls:

1. Open your Admin Console.
2. In the left sidebar, click Apps.
3. In the top of the window, click Custom Apps.
4. In the top right corner of the window, click Settings.  Box displays Global App Settings.
5. For each setting you want to enforce, click the slider button.  For an explanation of each setting, see Using global app settings, below.
6. Click Save.

Using global app settings

Disable published third party apps by default

When you select Disable published third party apps by default, Box disables all third-party published integrations, except those that you explicitly select in Individual Application Controls to add by default.

Disable unpublished apps by default

When you select Disable unpublished apps by default, Box disables all unpublished applications by default.  However, account holders can enable these applications by performing one of the following:

• Highlight the entry for a disabled app in the Platform Apps section, and then click the ellipsis ("...") and select Enable App. The application is now able to access content.
  Or
• Click Add App, and then click Enable App. The application is now able to access content.

Require manual admin authorization for transactional access apps

When you select Require manual admin authorization for transactional access apps, by default Box denies access to custom apps seeking transactional access to Box accounts in your enterprise, and grants access to only those transactional apps you've authorized.  When an account holder tries to use an unauthorized app for transactional access, Box sends an email to you requesting you to authorize the app.