Configuring a Box Security Provider

CES 7.0.8850+ (March 2017)

The Coveo Box connector mostly supports the Box security model (see Shared Link Limitation). When you want users searching for Box content in a Coveo search interface to only see the content to which they have access in Box, the connector needs a security provider to be able to index the permissions for each indexed Box item.

To configure a Box security provider

1. On the Coveo server, access the Administration Tool (see Opening the Administration Tool).

2. Click Configuration, and then Security.

3. In the navigation panel on the left, click Security Providers.

4. In the Security Providers page, click Add to create a new security provider.

5. In the Modify Security Provider page:

   

   1. Configure the following required parameters:

      Name

      Choose a meaningful name to identify the security provider.

      Example: Box Security Provider

      Security Provider Type

      In the drop-down list, select Box (x64).

      User Identity

      In the drop-down list, select (none).

      Security Provider

      Select the security provider that you selected or created to allow this security provider to resolve and expand the groups (see Box Connector Deployment Overview).

      Client Id Source

      The client identifier to use that you previously obtained (see Authorizing the Coveo Connector to Access the Box of Your Managed Users).

      Client Secret Source

      The client secret to use that you previously obtained (see Authorizing the Coveo Connector to Access the Box of Your Managed Users).

      Enterprise ID Source

      The Box Enterprise unique identifier as displayed in your Box Enterprise Admin Console Business Settings page and on the app General settings page.

      Public Key ID Source

      The public key unique identifier that you previously obtained (see Authorizing the Coveo Connector to Access the Box of Your Managed Users).

      Private Key File Source

      The full path of the valid PEM private key file that you previously obtained (see Authorizing the Coveo Connector to Access the Box of Your Managed Users).

   2. Leave the Allow Complex Identities cleared as it does not apply to this type of security provider.

   3. Click Apply Changes.