This page explains how to connect Box to mxHERO so rules can save emails and attachments to Box and replace attachments with Box links. Connect Box once for your whole organization (recommended), or connect individual Box user accounts.
Before you begin
You need a Box Business or Enterprise plan for the organization connection.
-
You need two people, or one person with both roles:
- A Box Admin (or a Co-Admin allowed to manage apps) to authorize mxHERO's app in the Box Admin Console.
- An Owner or Administrator of your mxHERO organization to install Box in the Admin Dashboard.
-
Have mxHERO's Box app Client ID ready (you'll paste it in Step 1):
3qjybyfh5w6ah97qn1oddmmjtcjxit6t Decide which link types your rules will use. Review Recommended Box Settings with your Box Admin.
Choose a connection type
| Box for Organization | Individual Box account | |
|---|---|---|
| Who connects it | Box Admin + mxHERO admin, once | Each Box user, through their own sign-in |
| Whose Box account receives the files | Each sender's or recipient's own Box account, or one account you choose | The connected account only |
| Keeps working when a user changes their password | Yes | No. The user must re-authorize. |
| Recommended for | Production rules | Tests, or a single shared archive account |
With Box for Organization, mxHERO uses its Box server-authentication app and acts as each user in your Box enterprise. You don't have to collect user passwords or tokens.
Note: When you pick an individual account in a rule, the dashboard shows an Important Note that individual tokens can expire without notice and the rule may stop working. Use Box for Organization whenever you can.
Step 1: Authorize mxHERO's app in the Box Admin Console
Do this as a Box Admin. Box renames screens from time to time; see Box's guide Platform App Approval for the current location.
- Sign in to the Box Admin Console.
- In the left navigation, select Platform.
- Select the Platform Apps tab, then Server Authentication Apps.
- Click Add in the top-right corner.
- Enter mxHERO's Client ID,
3qjybyfh5w6ah97qn1oddmmjtcjxit6t, then confirm and authorize the app.
The mxHERO app now appears in the list of server authentication apps.
Note: Older Box screens call this Apps › Custom Apps Manager › Add App. It is the same step.
If Box later reports that the app's scopes changed, a Box Admin must reauthorize it: in Platform › Platform Apps, open the ... menu on the mxHERO row and select Reauthorize.
Step 2: Install Box for Organization in the dashboard
Sign in to the Admin Dashboard and open Settings › Integrations.
On the Applications tab, find the Box for Organization card ("Verify your connection with Box storage service").
-
Click Install.
A Box sign-in window opens.
Sign in to Box as a Box Admin, then click Grant access to Box.
In the confirmation dialog, check the Box user, their role, the company name and the Enterprise ID. Make sure it is your production Box enterprise.
-
Click Confirm.
The card now shows your Box Enterprise Id (read-only), a Verify link and a Remove link. You don't type the Enterprise ID yourself; mxHERO reads it from your Box sign-in.
Click Verify. mxHERO requests a token for your enterprise using its Box app. If Step 1 is missing, you get an error here (see Troubleshooting).
Step 3: Map users to Box accounts (if needed)
When a rule uses Box for Organization with Automatically select the storage account based on sender/recipient, mxHERO looks up the Box user whose login matches the sender's or recipient's email address in your enterprise.
If a user's Box login is different from their email address, set it on the account:
Open Settings › Accounts and Groups.
Click Edit on the account.
-
Enter the Box login in Box for Organizations Account, then click Save.
You can also fill this column (boxAccount) with a CSV import, or from your directory source. See Managing Accounts.
Connect an individual Box account
Open Settings › Integrations › Accounts.
-
Click Add Account, then select Box.
Sign in to Box as the user whose account you want to connect, and grant access.
The account appears in the list with provider Box, type Storage Service and sync status Synced. You can also start this from a rule: in the Cloud Storage step, open the account list and click Add Account.
If your Box enterprise restricts which user-authorized apps people can use, a Box Admin must allow the mxHERO app in Platform › Platform Apps › User Authentication Apps.
Verify
On Settings › Integrations › Applications, click Verify on Box for Organization. No error should appear.
-
Create or edit a rule. In the Cloud Storage step, open Cloud Storage Account. Box for Organizations should be listed under Synced.
Send a test message that matches the rule, then check that the file appears in Box and that the link in the delivered email opens. In Reports › Email Flow Logs, the message shows a
store_file_uploadedevent. See Testing Mail Flow.
Link and security options for Box
Box supports the widest set of options. In a Security Definition you can use:
- Public, Company and recipient (collaborator) links. Recipient links add each recipient as a collaborator on a folder named
<sender>-<recipient>, with a role you choose (Co-owner, Editor, Viewer or Previewer; default Viewer). - Expiration and passwords (passwords on Public links only).
- Prevent download and remove download link (Public and Company links).
Your Box enterprise settings must allow each link type, and expirations must fit your Box auto-expiration limits. See Link Security Options by Provider and Recommended Box Settings.
How Box behaves
- Metadata. mxHERO writes email details (From, To, Subject, Date, Message-ID and more) to each file. The first time it does this, it creates a metadata template named mxHero in your Box enterprise. You can use your own Box templates through Template Definitions. See Template Definitions and Policies.
-
Names. Box keeps the
#character in file and folder names. Other naming rules are in File and Folder Naming Rules. -
Existing files. By default a file with the same name is uploaded as a new Box version (or left alone if identical). With Do not overwrite existing files on, mxHERO saves
name_v1.ext,name_v2.ext, and so on. - Throughput. mxHERO runs up to 10 uploads at a time per Box user with Box for Organization, and up to 8 per individual account. More uploads wait in a queue. To spread heavy traffic, see Storage Load Balancing.
- Large files. Box uploads are sent in a single request, so Box's single-upload size limit applies.
Troubleshooting
| Symptom or code | Cause | Fix |
|---|---|---|
FORBIDDEN_STORAGE_ACCOUNT when you confirm or verify |
mxHERO's app is not authorized in your Box Admin Console, or it was disabled. | Do Step 1, then click Verify again. If the app is listed, open its ... menu and check that it is authorized and enabled. |
INVALID_ENTERPRISE_ID or ENTERPRISE_ID_NOT_SET
|
The saved Enterprise ID is wrong or missing. | Click Remove on Box for Organization, then install it again, signing in as an admin of the right enterprise. |
APPLICATION_NOT_FOUND or BOX_API_ERROR
|
mxHERO could not reach its Box app, or Box returned an unexpected error. | Try Verify again later. If it persists, contact mxHERO support. |
Email Flow Logs show user_not_found
|
No Box user in your enterprise matches the sender's or recipient's email. | Create the Box user, or set Box for Organizations Account on the mxHERO account (Step 3), or use Use a specific storage account in the rule. |
organization_or_enterprise_id_not_found |
The Box enterprise connection was removed. | Reinstall Box for Organization. |
Link in the email opens "access denied"; logs mention Invalid value 'unshared_at'
|
The link expiration in the Security Definition is longer than your Box enterprise allows. | Shorten the expiration, or change Box auto-expiration settings. See Recommended Box Settings. |
Individual account shows Not synced; re-authorizing fails with INIT_WITH_DIFFERENT_ACCOUNTS
|
The user signed in to Box as a different user than the one being re-authorized. | Sign out of Box in the browser, then click Authorize again and sign in as the same Box user. See Re-authorizing Storage Accounts. |
| Uploads for all users stop at once, no email received | The organization connection lost access (for example, the app was removed in Box). mxHERO does not email anyone in this case. | Click Verify on Box for Organization and fix any error it shows. |
For other upload errors, see Storage Upload Failures.
Comments
0 comments
Please sign in to leave a comment.