SAP Concur ​

Sign in to your SAP Concur instance with administrator credentials.

Go to Administration > Company > Authentication Admin.

Select OAuth 2.0 Application Management from the menu.

Click Create new app.

Enter a descriptive name for your application in the App Name field, such as Workato Integration.

Enter a description for your application in the App Description field.

Select your environment in the App Stage field. Choose Development, Test, or Production.

Select your application type in the Application Type field. Choose Web Services (WS) Client or Integration with Concur Solutions (ICS) Client.

Select the grants your integration requires in the Allowed Grants field. Select password and refresh_token for password grant or refresh token grant authentication, or authorization_code for authorization code grant authentication.

Enter https://www.workato.com/oauth/callback in the Redirect URIs field for authorization code grant authentication. This field appears only when you select authorization_code.

Configure the allowed scopes for your integration. You must include EXPRPT at minimum. Refer to the Required scopes by trigger and action section to identify additional scopes required by the triggers and actions you plan to use.

Alternatively, you can click Enter Manually and copy and paste the following scopes to enable full connector functionality:

ATTEND
CONFIG
expense.report.read
expense.report.readwrite
EXPRPT
identity.user.core.read
identity.user.coreenterprise.writeonly
identity.user.coresensitive.read
identity.user.enterprise.read
identity.user.externalID.writeonly
identity.user.ids.read
identity.user.sap.read
IMAGE
INVPMT
INVVEN
LIST
openid
spend.list.read
spend.list.write
spend.listitem.delete
spend.listitem.read
spend.listitem.write
spend.user.general.read
spend.user.general.writeonly
travel.user.general.read
travel.user.private.read
user.provision.read
user.provision.write
user.read
user.write

Click Submit.

Record your Client ID and Client Secret in a secure location. These values are required to establish the connection in Workato.

Go to the SAP Concur admin panel, and click Administration > Company > Authentication Admin.

Select Company Request Token from the menu.

Enter your App ID (Client ID) from the OAuth application you created in the previous section.

Click Submit.

Record the following information displayed in the success dialog:

• Company UUID: Your company's unique identifier.
• Company Request Token: A temporary token that expires in 24 hours.

Click OK to close the dialog.

Open an API client of your choice, such as Postman or cURL.

Create a POST request to the SAP Concur OAuth2 token resource using the endpoint that matches your SAP Concur environment:

• Production: https://us.api.concursolutions.com/oauth2/v0/token
• Implementation (Test): https://us-impl.api.concursolutions.com/oauth2/v0/token

Configure the request body with the following parameters in x-www-form-urlencoded format:

• client_id: Your Client ID from the OAuth application
• client_secret: Your Client Secret from the OAuth application
• username: Your Company UUID from the Company Request Token step
• password: Your Company Request Token from the Company Request Token step
• grant_type: password
• credtype: authtoken

Example Postman configuration:

Postman configuration

Send the request.

Record the refresh_token value in a secure location. This value is required to establish the SAP Concur connection in Workato.

Click Create > Connection or press C twice.

Search for SAP Concur and select it as your app.

Enter a name for your connection in the Connection name field. Give this connection a unique name that identifies which SAP Concur instance it's connected to.

Connect to SAP Concur

Use the first Location drop-down menu to select the project or folder to store your connection.

Use the Implementation instance drop-down menu to select whether you're connecting to a Concur implementation server. Select Yes if connecting to an implementation server. Defaults to No for existing connections.

Use the Authentication type drop-down menu to select Refresh token grant.

Use the second Location drop-down menu to select the location of your Concur implementation server.

Enter the client ID from your application in the Client ID field.

Enter the client secret from your application in the Client secret field.

Enter the refresh token from your application in the Refresh token field.

Click Connect.

Click Create > Connection or press C twice.

Search for SAP Concur and select it as your app.

Enter a name for your connection in the Connection name field. Give this connection a unique name that identifies which SAP Concur instance it's connected to.

Connect to SAP Concur

Use the first Location drop-down menu to select the project or folder to store your connection.

Use the Implementation instance drop-down menu to select whether you're connecting to a Concur implementation server. Select Yes if connecting to an implementation server. Defaults to No for existing connections.

Use the Authentication type drop-down menu to select Password grant.

Enter your SAP Concur Username.

Enter your SAP Concur Password.

Use the second Location drop-down menu to select the location of your Concur implementation server.

Enter the Client ID from your application.

Enter the Client secret from your application.

Click Connect.

Go to Tools > Custom OAuth profiles.

Click + New custom profile.

Search for SAP Concur and select it as your app.

Enter a name for the profile.

Enter the Client ID and Client secret from the OAuth application you created.

Click Save.

Click Create > Connection or press C twice.

Search for SAP Concur and select it as your app.

Enter a name for your connection in the Connection name field.

Connect to SAP Concur

Use the first Location drop-down menu to select the project or folder to store your connection.

Use the Connection type drop-down menu to specify whether this is a cloud or on-prem connection.

Use the Implementation instance drop-down menu to specify whether you're connecting to a Concur implementation server. Select Yes if connecting to an implementation server. Defaults to No.

Use the Authentication type drop-down menu to select Authorization code grant.

Use the second Location drop-down menu to select the location of your Concur implementation server.

Optional. Expand Advanced settings and use the Scopes drop-down menu to select OAuth 2.0 scopes. Refer to Minimum and default scopes for requirements.

Use the Custom OAuth profile drop-down menu to select the custom OAuth profile configured with your SAP Concur client credentials.

Click Connect. You are redirected to SAP Concur to sign in and authorize access.