> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-box-ai-agents.md).

# Onboard Box AI Agents

**Prerequisites**

* Ensure you have the necessary administrative privileges in your Box instance, including the ability to access the Admin and Dev console.
* To access Box AI Studio and start building custom agents, your organization must have a Box - Enterprise Advanced license. If you would like to explore these capabilities, coordinate with your IT Administrator or Box Sales representative to ensure the proper licensing is in place.

**Note**: Box AI Studio is a Microsoft-native product, not a feature developed or managed by Palo Alto Networks.

* Ensure you have enabled Box AI. To do this, go to your **Box instance > Box AI > Settings** and click **Enable Box AI**.

1. Create and Configure a Custom Box App
   1. Sign in to your Box instance.
   2. From the left navigation pane, select Dev Console > Create Platform App > Custom App. 
   3. On the Custom App page, enter the following information:
      1. Give a suitable App Name.
      2. Give a suitable Description (optional).
      3. For Purpose, choose Automation from the drop-down and click Next.
   4. Select Server Authentication (Client Credentials Grant) for the authentication method and click Create App.
   5. On the newly created app page, select the Configuration tab.
   6. In the OAuth 2.0 Credentials section, copy the Client ID and the Client Secret (Fetch Client Secret) and keep it handy for use during onboarding.
   7. In the App Access Level section, choose App+Enterprise Access.
   8. In the Application Scopes > Content Actions section, ensure you select the following checkbox options:
      1. Read all files and folders stored in Box.
      2. Write all files and folders stored in Box.
      3. Manage AI.
   9. Ensure you deselect all other checkbox options under Application Scopes > Administrative Actions and Application Scopes > Developer Actions.
   10. Click Save Changes.
   11. Back on the newly created app page, select Authorization > Review and Submit and then click Submit. Your new app will move to the Pending Authorization state.
2. Authorize the App in the Admin Console.
   1. Click Back to My Account on the left navigation pane and select Admin Console > Integrations > Platform Apps Manager.
   2. On the Server Authentication Apps list, find the app you created and select ... > Authorize App > Authorize.
3. Retrieve the Enterprise ID

   1. Go Back to My Account > Dev Console and select the app you created.
   2. Copy the Enterprise ID (available in the General Settings tab).

   **Note**: Ensure you repeat the authorization process again if you modify any settings during configuration.
4. Onboard Box AI Agents to Cortex:
   1. Log in to Cortex. 
   2. Select **Settings > Data Sources and Integrations > Add New**. You can use the Search bar to find the Box connector.
   3. You may find multiple Box tiles, select the Box titled **Box integration for SaaS Data** and **Posture Security for Box**. Click on the tile and select the Add Another Instance. 
   4. On the **Capabilities** page, provide an Instance Name and select the Agent Security scanning capability. 
   5. On the **Connections** page, provide your Instance URL and select the Recommended authentication method. Provide your Client ID and Client Secret for the authentication flow.
   6. Once Cortex validates the credentials and permissions, the onboarding process is complete.
5. **Validation and Scanning**: Cortex validates the credentials and permissions. After the validation is successful, you will see a confirmation message. Scanning begins immediately after a successful validation. The amount of time Cortex takes to scan varies based on the amount of scan data. At a minimum, it takes at least one hour to scan and display data in the Cortex dashboard.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-box-ai-agents.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.