To setup your Box app in Cobalt for OAuth, you will need the following credentials from your Box Developer account:

  • Client ID
  • Client Secret
  • Scopes


  1. Box Developer account.
If you haven’t already created an app in Box, you’d need to create one.

Creating an app in Box

To create a Box app and aquire the above mentioned credentials, please follow the steps mentioned below:

  1. Log in to your Box Developer account.
  2. Click on the My Apps in the top nav bar.
Navigation for App setup
  1. Click on Create New App button in the right and choose Custom App.
  2. Enter the App Name for your application, select Integration in Purpose, select Workflow as Categories, Enter system name as Cobalt and click on Next.
  3. Select Authentication Method as User Authentication(OAuth 2.0) and click on Create App.
  4. Go to your Apps catalog in Cobalt > Search for Box > Settings > Use your credentials > Callback Url > Copy it.
  5. Navigate to Configuration tab in the OAuth app > Scroll down to OAuth 2.0 Redirect URI section > Paste the Callback Url > Click on Save Changes.
Setting up Box Developer app
  1. Scroll to the OAuth 2.0 Credentials section and copy the Client ID and Client Secret.
Getting Credentials

Configuring credentials in Cobalt

App settings page lets you configure the authentication settings for an OAuth2 based application. For your customers to provide you authorization to access their data, they would first need to install your application. This page lets you set up your application credentials.

Setting up application client credentials

Cobalt lets you use pre-configured applications to play around. You can do so by selecting Use our credentials. However, if you wish to use your own application, select Use your own credentials. Provide the aquired Client Id and Client secret and save it.

Configuring Scopes

Cobalt lets you configure what permissions to ask from your users while they install your application. The scopes can be added or removed from the App settings page, under Permissions & Scopes section.

For some applications Cobalt sets mandatory scopes which cannot be removed. Additional scopes can be selected from the drop down. Cobalt also has the provision to add any custom scopes supported by the respective platform.

OAuth Scopes

Once the scopes has been added to the application in Cobalt, go to your Box Developer account and update the scopes as added on Cobalt.

Select the OAuth App created for Cobalt > Scroll down to Application Scopes under Configuration tab > Add the scopes as added in Cobalt > Click on Save Changes.

If you are facing scopes missing or invalid scope error. Make sure you are not passing any custom scope not supported by the platform. And, the scopes selected here are identical to the ones selected in the platform.

Actions and triggers

Once the above setup is completed, you can create orchestrations of your use-cases using Box actions and triggers. Following are the set of Box actions and triggers supported by Cobalt.