> ## Documentation Index
> Fetch the complete documentation index at: https://developer.box.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Platform App Approval

export const Link = ({href, children, className, ...props}) => {
  const localizedHref = href;
  return <a href={localizedHref} className={className} {...props}>
      {children}
    </a>;
};

Server authentication applications using <Link href="/guides/authentication/jwt">JWT</Link> or
<Link href="/guides/authentication/client-credentials">Client Credentials Grant</Link> must be authorized by a Box Admin or Co-Admin before use.

Unpublished applications using <Link href="/guides/authentication/oauth2">OAuth 2.0</Link> authentication may
require enablement by a Box Admin or Co-Admin if they are <Link href="/guides/security/#enterprise-settings-and-authorization">inactive by default</Link>.

A Box Admin or Co-Admin needs an application's Client ID in order to properly
authorize or enable it in the Admin Console.

<Info>
  Apps created by free developer (Individual) accounts are authorized
  automatically. You can use <Link href="/guides/applications">My Platform Apps</Link> view to quickly look up
  the authorization and enablement status of your application.
</Info>

## One-Click Authorization

JWT and CCG authentication apps can be authorized directly from the
**Configuration** tab in the [Developer Console][devconsole]. This is
a convenient alternative to the methods described below.

### As an Admin or Co-Admin

If you are a Box Admin or Co-Admin, the Configuration tab displays:
**Server authenticated apps must be authorized before use.** Click
**Authorize** to authorize the app immediately.

### As a developer

If you are not a Box Admin or Co-Admin, the Configuration tab displays:
**Submit app for authorization for access to the Enterprise.** Click
**Submit** to send the request. Your admin or co-admin receives an email
notification, and you are notified by email once the request is
approved or denied.

## Approval Notifications

### User authentication apps

A semi-automated process to submit an app approval is available in the Developer
Console for user authentication applications.

Navigate to the **Enablement** tab for your application in the [Developer Console][devconsole].

<Frame border center>
  <img src="https://mintcdn.com/box/KBEcg4yicgc_HMRY/images/guides/authorization/app_enablement.png?fit=max&auto=format&n=KBEcg4yicgc_HMRY&q=85&s=6a2923fd8968dea2560a264027eae9c3" alt="Enablement tab" width="1858" height="642" data-path="images/guides/authorization/app_enablement.png" />
</Frame>

Submitting the application for approval sends an email to your
enterprise's Primary Admin to approve the application.
When a Box Admin or Co-Admin approves or declines your request,
you receieve an email with the decision.
More information on this process is available in our [support article on app authorization][app-auth].

## Manual Approval

The following steps provide instructions on how to manually approve the
application.

### As a developer

1. Navigate to the **Configuration** tab for your application in the [Developer Console][devconsole].
2. Scroll down to the OAuth 2.0 Credentials section and copy the **Client ID** value to provide to a Box Admin or Co-Admin.

Alternatively, hover over the application in the
<Link href="/guides/applications">My Platform Apps</Link> view to look up the **ClientID** and then
copy it using the `copy` button.

<Info>
  **Finding a Box Admin**

  If you don't know your enterprise Admin, go to your Box [Account
  Settings][settings] page and scroll to the bottom. If an admin contact is set
  you should see their contact information under "Admin Contact".
</Info>

### As an Admin

1. Navigate to the [Admin Console][adminconsole] and select the **Apps** tab (1) from the left navigation panel.
2. Click the **Platform Apps Manager** tab (2) at the top of your screen.
3. For both Server and User Authentication Apps screens, click the **Add App** (3) button in the top right corner to add a new app.
4. Alternatively, you can use the Platform Apps Manager table menu (4) to authorize and enable apps.

#### Server Authentication Apps

<Frame border center>
  <img src="https://mintcdn.com/box/KBEcg4yicgc_HMRY/images/guides/authorization/jwt_app_approval_flow.png?fit=max&auto=format&n=KBEcg4yicgc_HMRY&q=85&s=c6372b9f6fddfb276112d85f332abcff" alt="Server Apps tab" width="2988" height="992" data-path="images/guides/authorization/jwt_app_approval_flow.png" />
</Frame>

#### User Authentication Apps

<Frame border center>
  <img src="https://mintcdn.com/box/KBEcg4yicgc_HMRY/images/guides/authorization/oauth_app_approval_flow.png?fit=max&auto=format&n=KBEcg4yicgc_HMRY&q=85&s=d872efd126d65f442ab1743592681786" alt="User Apps tab" width="2978" height="1098" data-path="images/guides/authorization/oauth_app_approval_flow.png" />
</Frame>

In the popup that appears, enter the client ID for the application that the
developer collected from the **Configuration** tab of the
[Developer Console][devconsole].

## Re-authorization on changes

When the application's scopes or access level change the application needs to be
re-authorized. Repeat the process above and request a new Access Token for the
new changes to take effect.

In the same section where the application was initially authorized, an Admin
can re-authorize the application by clicking on the ellipses to the right
of the application name to **Reauthorize App**.

<Frame border center>
  <img src="https://mintcdn.com/box/KBEcg4yicgc_HMRY/images/guides/authorization/reauthorize_app.png?fit=max&auto=format&n=KBEcg4yicgc_HMRY&q=85&s=025fa7d7acde9bf11642731f20262c6f" alt="Re-authorize app" width="2464" height="862" data-path="images/guides/authorization/reauthorize_app.png" />
</Frame>

[devconsole]: https://app.box.com/developers/console

{/* i18n-enable localize-links */}

[settings]: https://app.box.com/account

[adminconsole]: https://app.box.com/master/settings/custom

[app-token]: /guides/authentication/app-token

[app-auth]: https://support.box.com/hc/en-us/articles/360043697014-Authorizing-Apps-in-the-Box-App-Approval-Process