The following table lists potential problems administrators might encounter during the setup or deployment of the Box Connector, along with possible solutions. For more information, see Common Errors in the Box documentation.

Problem Possible Solution
The exception {"error":"invalid_grant", "error_description":"Refresh token has expired"} appears in server.log. The error indicates that the refresh token has expired. A refresh token from Box has a lifespan of 60 days. Additionally, if a new refresh token has been requested, the old one will become expired. To configure PingFederate with a new refresh token, see Updating Box OAuth tokens.
The exception {"type":"error","status":403, "code":"access_denied_insufficient_permissions", "help_url":"http:\/\/developers.box.com\/docs\/#errors", "message":"Access denied - insufficient permission"} appears in server.log. Revert the email to the original and have the user log in and set their password, then update the user’s email.
The exception {"errors":[{"reason":"invalid_parameter", "name":"email","message":"Invalid value ‘<email value>. This email address already has a Box account. You can only add emails that do not have an account already."}]} appears in server.log. Revert the email to the original and have the user log in and set their password, then update the user’s email.
The exception {"type":"error","status":500,"code":"internal_server_error", "help_url":"http:\/\/developers.box.com\/docs\/#errors","message":"Internal Server Error","request_id":"xxxxxxxx"} appears in provisioner.log. If there is a value in the Target field Box Account Email for Transferring Deleted User’s Content, ensure that it is a valid email belonging to a Box user in your instance, and that the user is active.