This article explains how to connect your Box to Workbench.

Step 1: Enable API access for Workbench

To integrate the technology with Workbench, we need an enterprise admin on hand with access to Developer Console and Admin Console to build and authorize a Custom App. If you're unsure, reach out to your customer success engineer or email


Expel secures all login information our SOC analysts need about your devices in an MFA password product. Access to this login information is protected using our internal MFA processes. To learn more about the IP addresses all Expel traffic comes from, go here.

  1. Sign in to your Developer Console.

  2. Select Create New App.

  3. Select Server Authentication (Client Credentials Grant).

  4. Name your custom app Expel App and click Create App.

  5. Click Fetch Client Secret and make note of Client ID, and Client Secret, as you only see it 1 time.

  6. Select the app access level as App + Enterprise Access.

  7. Select the following application scopes:

    • Read all files and folders stored in Box.

    • Manage enterprise properties.

  8. On the Authorization tab, Review and Submit the app for authorization.

  9. The app status now reads Pending Authorization.

  10. Authorize the app through email or sign in to your Admin Console and click Apps from the top left side of the page.

  11. Under Custom Apps, find the app that was submitted and select Authorize App.

  12. Navigate to Account & Billing from the top left side of the page and take note of your Enterprise ID.

Step 2: Configure the technology in Workbench

  1. Log into

  2. Navigate to Settings > Security Devices.

  3. At the top of the page, click Add New Device.

  4. Search for and select Box.

    Screen Shot 2021-03-17 at 6.56.18 PM.png
    • Complete all fields using the credentials and information you collected in Step 1.


This page was accurate at the time of writing, but changes happen. If you find the instructions are outdated, let us know via your engagement manager or account representative.