SAP Concur ​

Sign in to your SAP Concur instance with administrator credentials.

Go to Administration > Company > Authentication Admin.

Select OAuth 2.0 Application Management from the menu.

Click Create new app.

Complete the basic application configuration fields:

• App Name: Enter a descriptive name for your application (for example, Workato Integration).
• App Description: Enter a description for your application.
• App Stage: Select your environment (Development, Test, or Production).
• Application Type: Select your application type (Web Services (WS) Client or Integration with Concur Solutions (ICS) Client).
• Allowed Grants: Select the grants your integration requires. Select password and refresh_token for password grant or refresh token grant authentication. Select authorization_code for authorization code grant authentication.
• Redirect URIs: Enter https://www.workato.com/oauth/callback for authorization code grant authentication. This field appears only when authorization_code is selected.

Configure the allowed scopes for your integration. At minimum, include EXPRPT. Refer to the Required scopes by trigger and action section to identify any additional scopes required by the triggers and actions you plan to use.

Alternatively, you can click Enter Manually and copy and paste the following scopes to enable full connector functionality:

ATTEND
CONFIG
expense.report.read
expense.report.readwrite
EXPRPT
identity.user.core.read
identity.user.coreenterprise.writeonly
identity.user.coresensitive.read
identity.user.enterprise.read
identity.user.externalID.writeonly
identity.user.ids.read
identity.user.sap.read
IMAGE
INVPMT
INVVEN
LIST
openid
spend.list.read
spend.list.write
spend.listitem.delete
spend.listitem.read
spend.listitem.write
spend.user.general.read
spend.user.general.writeonly
travel.user.general.read
travel.user.private.read
user.provision.read
user.provision.write
user.read
user.write

Click Submit.

Record your Client ID and Client Secret in a secure location. These values are required to establish the connection in Workato.

In the SAP Concur admin panel, go to Administration > Company > Authentication Admin.

Select Company Request Token from the menu.

Enter your App ID (Client ID) from the OAuth application you created in the previous section.

Click Submit.

Record the following information displayed in the success dialog:

• Company UUID: Your company's unique identifier.
• Company Request Token: A temporary token that expires in 24 hours.

Click OK to close the dialog.

Open an API client of your choice, such as Postman or cURL.

Create a POST request to the SAP Concur OAuth2 token resource using the endpoint that matches your SAP Concur environment:

• Production: https://us.api.concursolutions.com/oauth2/v0/token
• Implementation (Test): https://us-impl.api.concursolutions.com/oauth2/v0/token

Configure the request body with the following parameters (use x-www-form-urlencoded format):

• client_id: Your Client ID from the OAuth application
• client_secret: Your Client Secret from the OAuth application
• username: Your Company UUID from the Company Request Token step
• password: Your Company Request Token from the Company Request Token step
• grant_type: password
• credtype: authtoken

Example Postman configuration:

Postman configuration

Send the request.

Record the refresh_token value in a secure location. This value is required to establish the SAP Concur connection in Workato.

Click Create > Connection.

Search for and select SAP Concur on the New connection page.

Enter a name for your connection in the Connection name field. Give this connection a unique name that identifies which SAP Concur instance it's connected to.

Connect to SAP Concur

Use the first Location drop-down menu to select the project or folder to store your connection.

Use the Implementation instance drop-down menu to select whether you're connecting to a Concur implementation server. Select Yes if connecting to an implementation server. Defaults to No for existing connections.

Use the Authentication type drop-down menu to select Refresh token grant.

Use the second Location drop-down menu to select the location of your Concur implementation server.

Enter the client ID from your application in the Client ID field.

Enter the client secret from your application in the Client secret field.

Enter the refresh token from your application in the Refresh token field.

Click Connect.

Click Create > Connection.

Search for and select SAP Concur on the New connection page.

Enter a name for your connection in the Connection name field. Give this connection a unique name that identifies which SAP Concur instance it's connected to.

Connect to SAP Concur

Use the first Location drop-down menu to select the project or folder to store your connection.

Use the Implementation instance drop-down menu to select whether you're connecting to a Concur implementation server. Select Yes if connecting to an implementation server. Defaults to No for existing connections.

Use the Authentication type drop-down menu to select Password grant.

Enter your SAP Concur Username.

Enter your SAP Concur Password.

Use the second Location drop-down menu to select the location of your Concur implementation server.

Enter the Client ID from your application.

Enter the Client secret from your application.

Click Connect.

Go to Tools > Custom OAuth profiles.

Click + New custom profile.

Search for SAP Concur and select it as your app.

Enter a name for the profile.

Enter the Client ID and Client secret from the OAuth application you created.

Click Save.

Click Create > Connection.

Search for SAP Concur and select it as your app.

Enter a name for your connection in the Connection name field.

Connect to SAP Concur

Use the first Location drop-down menu to select the project or folder to store your connection.

Use the Connection type drop-down menu to specify whether this is a cloud or on-prem connection.

Use the Implementation instance drop-down menu to specify whether you're connecting to a Concur implementation server. Select Yes if connecting to an implementation server. Defaults to No.

Use the Authentication type drop-down menu to select Authorization code grant.

Use the second Location drop-down menu to select the location of your Concur implementation server.

Optional. Expand Advanced settings and use the Scopes drop-down menu to select OAuth 2.0 scopes. Refer to Minimum and default scopes for requirements.

Use the Custom OAuth profile drop-down menu to select the custom OAuth profile configured with your SAP Concur client credentials.

Click Connect. You are redirected to SAP Concur to sign in and authorize access.