Create New Account in SAP Concur

[ravikumargh]

We have requirement to integrate SAP Concur for operations account creation, update, disable and enable operations.

As per the documentation the account creation operation does not supported, even it is confirmed in the forum post.
Could you please let us know the Saviynt option/Solution to create SAP Concur Account.

https://docs.saviyntcloud.com/bundle/SAPConcur-v24x/page/Content/Supported-Features-v2022x.htm 

https://forums.saviynt.com/t5/identity-governance/createaccount-json-sap-concur/m-p/93382#M60822

Thanks

[rushikeshvartak]

You can use external Jar

[Rajatlm10]

@ravikumargh 

The create for SAP will work thru the Saviynt. I also worked on SAP concur integration and was able to get the createAccount working. 

If you are able to get the account created thru postman then you should be able to create it through Saviynt. 

[rushikeshvartak]

Can you share working json

[Rajatlm10]

@rushikeshvartak 

{
"accountIdPath": "call1.message.id",
"call": [
{
"name": "call1",
"connection": "acctAuth",
"url": "https://xyz/Users",
"httpMethod": "POST",
"httpParams": "{\"schemas\":[\"urn:ietf:params:scim:schemas:core:2.0:User\"],\"emails\":[{ \"value\":\${user.email}\",\"type\": \"work\"}],\"active\":true,\"userName\":\"${user.email}\",\"name\":{\"formatted\":\"abc\",\"familyName\":\"abc\",\"givenName\":\"abc\"},\"urn:ietf:params:scim:schemas:extension:spend:2.0:User\":{\"ledgerCode\":\"abc\",\"country\":\"US\",\"locale\":\"en_US\",\"reimbursementCurrency\":\"USD\",\"customData\": [ {\"id\":\"custom21\",\"value\":\"US\"}, {\"id\":\"orgUnit1\",\"value\":\"xyz\"},{\"id\":\"custom20\",\"value\":\"xyz\"},{\"id\":\"orgUnit4\",\"value\":\"xyz\"},{\"id\":\"orgUnit2\",\"value\":\"xyz\"},{\"id\":\"custom1\",\"value\":\"apitest@xyz.com\"}]},\"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\":{\"employeeNumber\":\"${user.email}\", \"companyId\":\"xyz\"},\"urn:ietf:params:scim:schemas:extension:spend:2.0:Role\":{\"roles\":[{\"roleName\": \"role1\"},{\"roleName\": \"role2\"},{\"roleName\": \"role3\"},{\"roleName\": \"role4\"}]}}",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200
]
},
"unsuccessResponses": {
"statusCode": [
400,
401,
404,
500,
501,
502,
503,
504
]
}
}
]
}

[haardik_verma]

Hi @ravikumargh @Rajatlm10 @rushikeshvartak ,

This seems to be a simple straight forward JSON to create users in SAP concur via Saviynt. Do you have any idea why this is not documented in the supported features list in the documentation?

Hi @Darshanjain , can you please share your inputs here.

Thanks

[rushikeshvartak]

Provide feedback on documentation

[rajsannidhi]

Hi @Rajatlm10 @haardik_verma 

We are also looking for concur integration, just wanted to confirm if create account and adding access (roles/entitlements) supported or not. Were you able to implement these use cases successfully. We are on version 24.5. Thank You!

[haardik_verma]

Hi @rajsannidhi ,

The create account part is supported on Concur API v4.
The Saviynt documentation Supported Software Versions (saviyntcloud.com) has mentioned the usage of Concur API v3 and hence it says that create account is not supported.

But since we are using a plain ootb REST connector in Saviynt for Concur, we can achieve create account by using v4 APIs of concur; I believe that's what @Rajatlm10 has used.

I am not sure if adding access (roles/entitlements) is supported or not, but if APIs are available, it should work.

[rajsannidhi]

Can we directly integrate with concur PROD instance, does concur allow us to test API calls directly in PROD?

Is it mandatory for setting 3rd party app integration with a sandbox environment first, test API calls and then promote the app to PROD.

[rushikeshvartak]

This is ideal practice you should first validate all application with sandbox then move to PROD. to avoid large user impact

[rajsannidhi]

I agree with you, just checking because our customer doesn't have concur test instance, so wanted to know if concur allows to do it or not, based on what I found I think they would want us to test with sandbox first. Just looking for confirmation.

[rajsannidhi]

@haardik_verma Thank you for providing the details.
@rushikeshvartak Provided Feedback on the documentation.