SAP Concur uses the OAuth authentication standard, which requires the authenticating user to interact with SAP Concur via the browser. The provider facilitates the OAuth exchange in various ways.

The following procedure creates and registers a custom OAuth application in the SAP Concur admin console, and obtains the OAuth client credentials, the OAuthClientId and OAuthClientSecret.

Procedure

In order to obtain an access token, you need to create and register a custom OAuth application with SAP Concur. If you have access to the OAuth 2.0 Application Management Tool application with SAP Concur, you can create one yourself. If that tool is not available, you must contact your SAP Concur Partner Enablement Manager or Partner Account Manager.

Once you have registered an application, you will receive a clientId (which will be your OAuthClientId), clientSecret (which will be your OAuthClientSecret), and geolocation information.

Select the APIs that your app will access. For full driver functionality, you must select all of the following:

• ATTEND
• EXPRPT
• LIST
• IMAGE
• RCTIMG
• CCARD
• TAXINV
• CONFIG
• INVPMT
• SUPSVC
• ITINER
• USER
• expense.report.read
• spend.list.read
• spend.listitem.read
• user.read
• identity.user.core.read
• identity.user.coresensitive.read
• identity.user.enterprise.read
• identity.user.ids.read
• company.read