Name: Creating an Application in SAP Concur
Uploaded: 2023-12-5
Duration: 377 s

Share feedback

<p><u><strong>Planned maintenance of Practice Systems</strong></u></p>

Planned maintenance of Practice Systems

Why create an SAP account?

Enhance your learning experience

SAP Learning

Choose your subscription

Manage your subscription

Live Sessions

Hands-on Practice

Certification

My Learning

Ready to start learning?

<div><div>In this video series, by Tahir Hussain Babar (Bob) from the SAP HANA Academy and Venkatesh Babu from SAP Concur Cloud Channel Sales, we will show you how to get started with various data integration aspects, by looking at authentication and authorization, when using SAP Concur APIs. In this video, we'll go through the steps needed to create an application in the Administration tab in SAP Concur, which enables you to have the correct authentication needed to access SAP Concur APIs. We'll go over Production Sandbox Environments, Authentication Administration and how to create an "application" to give you authentication / authorization to begin using SAP Concur APIs.</div></div>

Creating an Application in SAP Concur

Welcome to the SAP HANA Academy. My name's Bob and in this playlist we'll be looking at developing SAP Concur Extension Solutions. In this mini video series, we'll be looking at an overview and how we authenticate when we're using the API's. In this second video we'll be looking at OAuth 2.0 application management. We'll create this within a production sandbox environment. We'll look at authentication administration, and ultimately we'll create an application. The first thing we need to do is log in to our sandbox. I'll log in with my user name and password allocated by SAP Concur and that user will need to have certain admin rights. In this video, I'm going to explain what happens if you have those admin rights. For example, if you're a customer and you have admin rights on a sandbox, in that you'll be able to create your own application and allocate your own rights. But there's also a scenario where SAP Concur will create the application for you. And this will mainly apply to partners, because SAP Concur have created the application. They'll send you a URL called a deep link where you can access your various credentials. And we'll cover that at the end of this mini video series. Of course, when you've logged in, you've got access to your various tasks, your approvals, your expenses, and your reports. But what we're concerned with is because we've got access rights, we want to use the administration tab at the top right hand side here. So if I click on administration and go to company here, we've got various tools that we want to access. And in this video series, we're going to access our Authentication Administration. And this is where we can create our application, again, because we've got admin rights. So to create the application, we select OAuth 2.0 Application Management and we'll have access to various applications, for example, that we've already created. What I'll do is I'll show you the steps to create the application, and then we'll use an existing application in order to access our API's. So let's create the app. We'll give it a name. I'm going to call mine SHA underscore Dev. There's only one type of app type that I can select here with the rights I've got. So we'll just copy that name and we'll put it into the description. Now what you see are the two most important parts which are allowed grants and allowed scopes. There's also a link to documentation which explained how these grants and scopes works, but I'll explain it. You'll see that we've put the URL on the screen so you can always follow along if you want further information. In order to build enterprise applications, we actually need access to three specific grants, that is refresh token. We'll also need password and we'll need client credentials. There are three other types of grants and again, you can find out what they're all for within the documentation. Now more importantly is this concept of scopes. Again, I'll go and grab that link and I'll paste it into a browser. And scopes will quite simply determine which APIs you have access to. Each of the scopes will have a specific action. And those actions are listed here. If I scroll down, you'll have read, write, writeonly, and delete. So of course via API you'll be performing a get, which is a read. And when you're posting, you'll be performing a write. Furthermore, there's a link at the bottom which will list all those API scopes. So you can see for example, if you use the scope attend, you will be accessing the attendees API CCARD implies that you'll be accessing all the credit card APIs. COMPD is company details, so on and so forth. You can also see here we've got examples of the scope plus the action where you've got budgetitem.read. So when we go back to our application, by default what we'll see is we have a mandatory scope called openid. There are other ones, so for example, if I add a few that we're going to use in this playlist. We'll add event.topic.read. And what I'll do quickly is I'll add the other ones that we'll use in this video series. Again, in this mini series, we're concentrating on authentication and authorization. But in a future video series, we're actually going to post a trip and retrieve all the information solely using API's. Lastly, we just need to specify if it's an SAP ICS application. Mine isn't going to be, so I don't need to select it. I'll click on Submit. What you'll be then presented with is both your client ID and your client secret. Which of course you'll need to make a note of because this is what you'll be using to get access to your refresh token. I'm going to copy that and place it into a notepad. It's possible to regenerate a new client ID in secret, but of course the old one will then not work anymore. Now that we've created our app, we can see a summary of everything that we've done. If we go back to the home page, you'll see a summary of our three different apps. Again, I'll be using a different client ID in order to access our APIs. In the next video, we'll be looking at how to create what's called a company request token, again in this administration panel. And then we'll look at ultimately creating our refresh token, which will enable us to create our bearer token that will be used in our API calls.