SAP Concur

This article describes how to generate credentials to connect 1Password SaaS Manager to SAP Concur.

Log in to Concur as an administrator.

Go to Administration > Company > Authentication Admin:

Click on OAuth 2.0 Application Management:

In the Application list view, click Create New App:

In the Create New App screen:

1. Enter an App Name (e.g. 'SaaS Manager') and App Description ('SaaS Manager connector').
2. For the Allowed Grants enter:
   refresh_token password client_credentials

3. The Allowed Scopes depend on the features you enable when you connect SAP Concur to SaaS Manager:

   Users (required)

   identity.user.ids.read identity.user.core.read identity.user.enterprise.read
   Additional user data (optional)
   travel.user.general.read spend.user.general.read

   Expense reports (optional)

   company.read creditcardaccount.read expense.report.read purchaserequest.read user.read spend.list.read user_read BANK CCARD COMPANY EXPRPT EXTRCT FOP GHOST INVVEN 
   Additional receipt data (optional)
   receipts.read IMAGE

   Provisioning and Deprovisioning (optional)

   identity.user.coreenterprise.writeonly

Click Submit.

You will now be shown the Client ID and Client Secret. Note these down (e.g. copy to a text editor) as you will need to enter these into SaaS Manager later.

Go back to the Authentication Administration screen and click Company Request Token:

Enter the Client ID that you received earlier into the App ID field. 

Click Submit:

Finally you will be shown a Company UUID and Company Request Token. You will need to enter both of these into SaaS Manager, so copy them to a text editor.