Configuring the Veza integration for Concur
Concur is an enterprise-level expense management platform that automates expense reports, approvals, and payments. The integration facilitates data exchange between Veza and Concur, for user and role discovery.
Before configuring Concur, you must create a new integration application within Concur and generate OAuth 2.0 credentials. Follow these steps:
Navigate to the OAuth 2.0 Application Management screen in Concur and create a new app.
Provide a name and description for the app.
Add allowed grants:
refresh_token
, password
Add allowed scopes:
openid
, identity.user.core.read
, identity.user.enterprise.read
, identity.user.ids.read
, identity.company.core.read
, spend.user.general.read
, identity.user.coresensitive.read
.
Submit and note down the Client ID and Client Secret values.
Go to the Company Request Token page. Enter the app ID and click submit.
Note the Company UUID and Request Token. You will exchange the temporary token for a refresh token prior to configuring the integration in Veza.
Use the curl
command to obtain a refresh token. This command must be run within 24 hours of generating the request token.
Replace placeholders with the actual Client ID, Client Secret, Company UUID, and Request Token:
# Replace placeholders with actual values
curl --location 'https://us.api.concursolutions.com/oauth2/v0/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_id=YOUR_CLIENT_ID' \
--data-urlencode 'client_secret=YOUR_CLIENT_SECRET' \
--data-urlencode 'grant_type=password' \
--data-urlencode 'username=YOUR_COMPANY_UUID' \
--data-urlencode 'password=YOUR_REQUEST_TOKEN' \
--data-urlencode 'credtype=authtoken'
From the response, collect the refresh_token
value, and use it to configure the integration in Veza.
In Veza, open the Integrations page.
Click Add New and pick Concur as the type of integration to add
Enter the Client ID, Client Secret, and Refresh Token, then Save the configuration
Client ID
Obtained from Concur app settings
Client Secret
Obtained from Concur app settings
Refresh Token
Obtained using curl
command
A user account within the Concur system, typically for submitting, managing, and reporting business expenses. The connector supports user attributes:
is_active
: True if User is active on Concur
cost_center
: User’s cost center
employee_number
: User’s employee number if set in Concur
start_date
: User’s start date
termination_date
: User’s termination date
email
: User's email address
Concur Roles determine what level of access and abilities a user has within the system. Built-in roles include approver, processor, or administrator.
The Concur connector currently discovers user roles for:
Base Concur application
Concur Spend integration