@kendomen is right. Here are some more details:
Go to api.box.com. Then select "Admin Console."

Now this is where he gets funky. Click on the security step.

Then fine print.

This gives a toolbar that should have been displayed three steps back. Click "Applications."

Then click "Authorize new application."

As a result, a pop-up window appears in which you enter the application key. This is referred to as the βClientIDβ in the json file that you may have downloaded from Box.com.

source share