2 Creating an Application By Using the SAP Concur Connector

Learn about onboarding applications using the connector and the prerequisites for doing so.

• Prerequisites for Creating an Application By Using the Connector

• Process Flow for Creating an Application By Using the Connector

• Creating an Application by Using the SAP Concur Connector

• Performing the Post Configuration Tasks for the SAP Concur Connector

2.1 Prerequisites for Creating an Application By Using the Connector

You must satisfy the following prerequisites to create a connection with the SAP Concur.

• Identify the SAP Concur Application Edition
• Obtain the Client ID and Client Secret
• Enable the APIs
• Download the Connector Installation Package

2.1.1 Identify the SAP Concur Application Edition

Identify which SAP Concur application edition you are using.

There are two types of SAP Concur application editions: Professional Edition and Standard Edition. Perform the following steps to identify the edition of the SAP Concur application you are using before creating an SAP Concur connection.

1. Sign in to the SAP Concur application
2. Click the Administration (gear) icon located in the left navigation pane.
3. Under Administration, select the Expense option
   The Expense Administration module appears

   Table 2-1 Menu options

   If...	Then...
   You see Expense Administration.	Your organization is using the Professional Edition.
   The Expense Administration option does not appear.	You are likely using the Standard Edition or a different edition.

   If this menu is not clear, you can also try the following:

   • Check with your SAP Concur administrator or SAP Support for confirmation.
   • Review your licensing information or contract details in the Company Admin section.

2.1.2 Obtain the Client ID and Client Secret

You must obtain the client ID and client secret in order to create the new app.

The SAP Concur administrator must perform the following tasks to obtain the client ID and client secret:

1. Sign in to the SAP Concur application.
2. In the left navigation pane, click Administration.
3. Select Company from the expanded menu.
4. Select Authentication Admin under the Company submenu.
5. Click OAuth 2.0 Application Management.
   This opens the application list where you can manage and create OAuth 2.0 apps.
6. Click Create New App in the Application list page.
7. Fill in the details on the Create New App page:

   Table 2-2 Create New App page options

   Element	Description
   App Name	Update the app name: Company_Name - description_text today’s_date Manually replace Company_Name and today’s_date with your own values. Update description_text with a description appropriate for your environment.
   App Type	Leave blank
   App Description	Update the app name: Company_Name - Client_Web_Services_PROD today’s_date Manually replace Company_Name and today’s_date with your own values. Update Client_Web_Services_PROD with a description appropriate for your environment.
   Allowed Grants	Select refresh_token, password, and client_credentials.
   Allowed Scopes	Add all or restrict, as needed
   Principals	Leave unchecked

8. Click Submit to create the app

2.1.3 Enable the APIs

Enable APIs for a registered OAuth 2.0.

The SAP Concur administrator must perform the following steps to enable APIs for a registered OAuth 2.0 application:

1. Sign in to the SAP Concur application.
2. In the left navigation pane, click the Administration (gear) icon.
3. Select Company from the expanded menu.
4. Click Authentication Admin.
5. Click OAuth 2.0 Application Management.
6. Click the registered application or click Create New App.
7. In the Grants/Scopes section, select the following:

   Table 2-3 Grants/Scopes options

   Element	Description
   Allowed Grants	Select refresh_token, password, and client_credentials.
   Allowed Scopes	Select all scopes required for API operations (such as user management spend roles and Custom data).

8. Click Submit to save the changes
   The APIs are enabled for this application by the scopes you selected.

2.1.4 Download the Connector Installation Package

You can obtain the installation package for your connector on the Oracle Technology Network (OTN) website.

To download the connector installation package:

1. Navigate to the OTN website at http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/connectors-101674.html
2. Click OTN License Agreement and read the license agreement.
3. Select the Accept License Agreement option.
   You must accept the license agreement before you can download the installation package.
4. Download and save the installation package to any directory on the computer hosting Oracle Identity Governance.
5. Extract the contents of the installation package to any directory on the computer hosting Oracle Identity Governance.
   This creates a directory named CONNECTOR_NAME-RELEASE_NUMBER.
6. Copy the CONNECTOR_NAME-RELEASE_NUMBER directory to the OIG_HOME/server/ConnectorDefaultDirectory directory.

2.2 Process Flow for Creating an Application By Using the Connector

From Oracle Identity Governance release 12.2.1.3.0 onwards, connector deployment is handled using the application onboarding capability of Identity Self Service.

The following flow depicts the high-level steps for creating an application in Oracle Identity Governance by using the connector installation package.

Figure 2-1 Overall Flow of the Process for Creating an Application By Using the Connector

2.3 Creating an Application by Using the SAP Concur Connector

You can onboard an application into Oracle Identity Governance from the connector package by creating a Target application. To do so, you must log in to Identity Self Service and then choose the Applications box on the Manage tab.

The following is the high-level procedure to create an application by using the connector:

Note:

For detailed information on each of the steps in this procedure, see Creating Applications of Oracle Fusion Middleware Performing Self Service Tasks with Oracle Identity Governance.

1. Create an application in Identity Self Service. The high-level steps are as follows:
   1. Log in to Identity Self Service either by using the System Administration account or an account with the ApplicationInstanceAdministrator admin role.
   2. Ensure that the Connector Package option is selected when creating an application.
   3. Update the basic configuration parameters to include connectivity-related information.
   4. If required, update the advanced setting parameters to update configuration entries related to connector operations.
   5. Review the default user account attribute mappings. If required, add new attributes or you can edit or delete existing attributes.
   6. Review the provisioning, reconciliation, organization, and catalog settings for your application and customize them if required. For example, you can customize the default correlation rules for your application if required.
   7. Review the details of the application and click Finish to submit the application details.
      The application is created in Oracle Identity Governance.
   8. When you are prompted whether you want to create a default request form, click Yes or No.
      If you click Yes, then the default form is automatically created and is attached with the newly created application. The default form is created with the same name as the application. The default form cannot be modified later. Therefore, if you want to customize it, click No to manually create a new form and attach it with your application.
2. Verify reconciliation and provisioning operations on the newly created application.

See Also:

• Configure the SAP Concur Connector for details on basic configuration and advanced settings parameters, default user account attribute mappings, default correlation rules, and reconciliation jobs that are predefined for this connector

• Configuring Oracle Identity Governance for details on creating a new form and associating it with your application, if you chose not to create the default form

2.4 Performing the Post Configuration Tasks for the SAP Concur Connector

These are the tasks that you must perform after creating an application in Oracle Identity Governance.

The plugin must be registered in Oracle Identity Governance using the Plugin Registration utility. Upload the UpdateAccountStatus.zip file through the plugin registration interface to deploy the plugin. After successful registration, the plugin components are loaded into the system and the related functionality becomes available.

The plugin Zip is located in below location and it contains logical component that extends the functionality of features provided by Oracle Identity Governance. The zip file contains all the files related to the Status Reconciliation Job of a Request. It contains plugin xml, lib – directory, META-INF – directory.

Concur-12.2.1.3.0\plugin\UpdateAccountStatus.zip

See Registering Plug-ins in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Governance for more information about Registering Plug-ins.