## Citrix ShareFile integration

Integrating Citrix ShareFile with Frontegg allows your application to authenticate users via OAuth 2.0 and interact with their ShareFile accounts — browsing folders, uploading and downloading files, managing shares, and accessing account information on their behalf.

ShareFile issues OAuth credentials per account through its API Key generator. In addition to the standard **Client ID** and **Client Secret**, ShareFile is scoped to a per-account control-plane host, so you also provide your account **subdomain** and **API control plane** when configuring the integration.

Prerequisites
- A Citrix ShareFile account with API access (OAuth 2.0 enabled)
- Permission to generate API keys for your account at [api.sharefile.com](https://api.sharefile.com/)


### Connect Citrix ShareFile

#### Step 1: Open the ShareFile API Key generator

Go to [api.sharefile.com](https://api.sharefile.com/) and sign in with your ShareFile account. In the left menu, open **Get an API Key**. The **Your API Keys** page lists any existing keys. Click **Create New**.

![ShareFile API Key generator](/assets/sharefile-1.afce1f26f43f4b24739366cbc5066c7171ed8f4cf3d7c18a87eddce7c71db224.1ce25488.png)

#### Step 2: Register a new application

On the **API Key Generator** page, fill in the form:

- **Application Name** — a name for your application, for example `Frontegg Integration` (do not include the word "ShareFile").
- **Description** — an optional description of the application.
- **Redirect URI** — your Frontegg Redirect URL, which must use HTTPS and match the authorization request exactly:
`https://YOUR_MCP_GATEWAY_URL/integration-callback`


Click **Generate Api Key** to create the application.

![Register a ShareFile application](/assets/sharefile-2.b514680801990ccfb0ec05fc72696c8d346faf2fa6707a7c27a78ae8cde047cb.1ce25488.png)

#### Step 3: Copy the Client ID and Client Secret

Back on the **Your API Keys** page, your application appears in the list with its **Client Id** and **Client Secret**. Copy both values for use in the Frontegg portal.

Keep your credentials secure
Never share or commit your Client Secret to version control.

![ShareFile Client ID and Client Secret](/assets/sharefile-3.ace38a8e40a9f65737fb64d831cdad630fbb293ba3c7de32f37db3e48357aae6.1ce25488.png)

#### Step 4: Note your subdomain and API control plane

ShareFile scopes the API to your account's control-plane host, so the integration also needs two account-specific values:

- **Subdomain** — your ShareFile account subdomain. It appears in the top bar of the API portal and in your account URL — for example, `mycompany` from `https://mycompany.sharefile.com`.
- **API control plane** — your account's API host. US accounts use `sf-api.com`; EU accounts use `sf-api.eu`.


![ShareFile subdomain](/assets/sharefile-4.7170fa6f6af313eab4bd3eadcf4b5ee7b2055d32f4964824402674f738d497ce.1ce25488.png)

### Configure the Frontegg portal

Once you have your **Client ID**, **Client Secret**, **subdomain**, and **API control plane**, configure the integration in the Frontegg portal:

1. Open the **Frontegg portal** and navigate to **[ENVIRONMENT]** → **Integrations** → **Citrix ShareFile**.
2. Enter the **Client Id** in the **Client ID** field and the **Client Secret** in the **Client Secret** field.
3. Enter your **ShareFile subdomain** (for example, `mycompany`) and **API control plane** (for example, `sf-api.com`).
4. Click **Save**.


Scopes
Frontegg requests the `sharefile:restapi:v3` and `openid` scopes during authorization to access the ShareFile REST API. There is no separate scope-selection screen in the API Key generator.

### Additional resources

- [ShareFile API documentation](https://api.sharefile.com/)
- [ShareFile OAuth 2.0 guide](https://api.sharefile.com/gettingstarted/oauth2)
- [How to get your Redirect URL](/agen-for-work/connectors/redirect-url)