SAP Concur
This connectivity package provides support for managing users and role assignments in SAP Concur.
Supported objects and operations
System objects | Omada Identity Data Model | Operations |
---|---|---|
Users | Account | Create, read, update |
Roles* | Resource | Read |
Roles assignments | Resource assignment | Create, read, delete |
(*) Roles are managed via an attribute on the User object.
Minimum required permissions
Only administrators can acquire the authorization credentials required to connect to the SAP Concur API. To initiate the configuration process, see Learn How to Extract a List of Active SAP Concur Users Using the User Identity and Provisioning API | SAP Blogs in the SAP Community blog. It outlines the essential configuration needed in SAP Concur to ensure a seamless integration with Omada Identity.
Implementation notes
Some fields in the task mappings require manual entry and are enclosed within square brackets []
. Ensure to fill in these fields manually.
For SAP Concur locale codes, see SAP Concur Developer Center | Locale Codes.
Network requirements
None.
Prerequisites
Before you provision users, perform the following steps:
-
Open the RoPE configuration file:
- On-prem:
\Omada Identity Suite\Role and Policy Engine\Service\ConfigFiles
- Cloud: In the Cloud Management Portal, navigate to Environments. In the environment row, from the drop-down menu, select Configure. Choose the RoPE configuration tab.
- On-prem:
-
Add the following lines under the Attribute Value Resolver extension (change the key value in case you already have that specific key defined):
<add key="SAPCONCURDCOUNTRY" name="SAP Concur Account:COUNTRY" extraInfo="Type:ReferencePath" value="/#IDENTITY/COUNTRY:[ISOCODE]" />
<add key="SAPCONCURMANAGER" name="SAP Concur Account:MANAGER" extraInfo="Type:ReferencePath" value="/#IDENTITY/OUREF/MANAGER/IDENTITYREF:[EMPLOYEEID]" />
SAP Concur uses valid ISO 3166 country codes, represented by two letters.
Omada utilizes the Employee ID field for the BiManager attribute in SAP Concur. Adjust the configuration if a different field is used.