You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/saas-apps/concur-travel-and-expense-tutorial.md
+33-33Lines changed: 33 additions & 33 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with Concur Travel and Expense | Microsoft Docs'
3
-
description: Learn how to configure single sign-on between Azure Active Directory and Concur Travel and Expense.
2
+
title: 'Tutorial: Azure Active Directory single sign-on (SSO) integration with SAP Concur Travel and Expense | Microsoft Docs'
3
+
description: Learn how to configure single sign-on between Azure Active Directory and SAP Concur Travel and Expense.
4
4
services: active-directory
5
5
author: jeevansd
6
6
manager: CelesteDG
@@ -13,61 +13,61 @@ ms.date: 12/21/2020
13
13
ms.author: jeedes
14
14
---
15
15
16
-
# Tutorial: Azure Active Directory single sign-on (SSO) integration with Concur Travel and Expense
16
+
# Tutorial: Azure Active Directory single sign-on (SSO) integration with SAP Concur Travel and Expense
17
17
18
-
In this tutorial, you'll learn how to integrate Concur Travel and Expense with Azure Active Directory (Azure AD). When you integrate Concur Travel and Expense with Azure AD, you can:
18
+
In this tutorial, you'll learn how to integrate SAP Concur Travel and Expense with Azure Active Directory (Azure AD). When you integrate SAP Concur Travel and Expense with Azure AD, you can:
19
19
20
-
* Control in Azure AD who has access to Concur Travel and Expense.
21
-
* Enable your users to be automatically signed-in to Concur Travel and Expense with their Azure AD accounts.
20
+
* Control in Azure AD who has access to SAP Concur Travel and Expense.
21
+
* Enable your users to be automatically signed-in to SAP Concur Travel and Expense with their Azure AD accounts.
22
22
* Manage your accounts in one central location - the Azure portal.
23
23
24
24
## Prerequisites
25
25
26
26
To get started, you need the following items:
27
27
28
28
* An Azure AD subscription. If you don't have a subscription, you can get a [free account](https://azure.microsoft.com/free/).
29
-
* Concur Travel and Expense subscription.
29
+
*SAP Concur Travel and Expense subscription.
30
30
* A "Company Administrator" role under your Concur user account. You can test if you have the right access by going to [Concur SSO Self-Service Tool](https://www.concursolutions.com/nui/authadmin/ssoadmin). If you do not have the access, please contact Concur support or implementation project manager.
31
31
32
32
## Scenario description
33
33
34
34
In this tutorial, you configure and test Azure AD SSO.
35
35
36
-
* Concur Travel and Expense supports **IDP** and **SP** initiated SSO
37
-
* Concur Travel and Expense supports testing SSO in both production and implementation environment
36
+
*SAP Concur Travel and Expense supports **IDP** and **SP** initiated SSO
37
+
*SAP Concur Travel and Expense supports testing SSO in both production and implementation environment
38
38
39
39
> [!NOTE]
40
40
> Identifier of this application is a fixed string value for each of the three regions: US, EMEA, and China. So only one instance can be configured for each region in one tenant.
41
41
42
-
## Adding Concur Travel and Expense from the gallery
42
+
## Adding SAP Concur Travel and Expense from the gallery
43
43
44
-
To configure the integration of Concur Travel and Expense into Azure AD, you need to add Concur Travel and Expense from the gallery to your list of managed SaaS apps.
44
+
To configure the integration of SAP Concur Travel and Expense into Azure AD, you need to add SAP Concur Travel and Expense from the gallery to your list of managed SaaS apps.
45
45
46
46
1. Sign in to the Azure portal using either a work or school account, or a personal Microsoft account.
47
47
1. On the left navigation pane, select the **Azure Active Directory** service.
48
48
1. Navigate to **Enterprise Applications** and then select **All Applications**.
49
49
1. To add new application, select **New application**.
50
-
1. In the **Add from the gallery** section, type **Concur Travel and Expense** in the search box.
51
-
1. Select **Concur Travel and Expense** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
50
+
1. In the **Add from the gallery** section, type **SAP Concur Travel and Expense** in the search box.
51
+
1. Select **SAP Concur Travel and Expense** from results panel and then add the app. Wait a few seconds while the app is added to your tenant.
52
52
53
-
## Configure and test Azure AD SSO for Concur Travel and Expense
53
+
## Configure and test Azure AD SSO for SAP Concur Travel and Expense
54
54
55
-
Configure and test Azure AD SSO with Concur Travel and Expense using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in Concur Travel and Expense.
55
+
Configure and test Azure AD SSO with SAP Concur Travel and Expense using a test user called **B.Simon**. For SSO to work, you need to establish a link relationship between an Azure AD user and the related user in SAP Concur Travel and Expense.
56
56
57
-
To configure and test Azure AD SSO with Concur Travel and Expense, perform the following steps:
57
+
To configure and test Azure AD SSO with SAP Concur Travel and Expense, perform the following steps:
58
58
59
59
1.**[Configure Azure AD SSO](#configure-azure-ad-sso)** - to enable your users to use this feature.
60
60
1.**[Create an Azure AD test user](#create-an-azure-ad-test-user)** - to test Azure AD single sign-on with B.Simon.
61
61
1.**[Assign the Azure AD test user](#assign-the-azure-ad-test-user)** - to enable B.Simon to use Azure AD single sign-on.
62
-
1.**[Configure Concur Travel and Expense SSO](#configure-concur-travel-and-expense-sso)** - to configure the single sign-on settings on application side.
63
-
1.**[Create Concur Travel and Expense test user](#create-concur-travel-and-expense-test-user)** - to have a counterpart of B.Simon in Concur Travel and Expense that is linked to the Azure AD representation of user.
62
+
1.**[Configure SAP Concur Travel and Expense SSO](#configure-sap-concur-travel-and-expense-sso)** - to configure the single sign-on settings on application side.
63
+
1.**[Create SAP Concur Travel and Expense test user](#create-sap-concur-travel-and-expense-test-user)** - to have a counterpart of B.Simon in SAP Concur Travel and Expense that is linked to the Azure AD representation of user.
64
64
1.**[Test SSO](#test-sso)** - to verify whether the configuration works.
65
65
66
66
## Configure Azure AD SSO
67
67
68
68
Follow these steps to enable Azure AD SSO in the Azure portal.
69
69
70
-
1. In the Azure portal, on the **Concur Travel and Expense** application integration page, find the **Manage** section and select **single sign-on**.
70
+
1. In the Azure portal, on the **SAP Concur Travel and Expense** application integration page, find the **Manage** section and select **single sign-on**.
71
71
1. On the **Select a single sign-on method** page, select **SAML**.
72
72
1. On the **Set up single sign-on with SAML** page, click the edit/pen icon for **Basic SAML Configuration** to edit the settings.
73
73
@@ -100,10 +100,10 @@ In this section, you'll create a test user in the Azure portal called B.Simon.
100
100
101
101
### Assign the Azure AD test user
102
102
103
-
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to Concur Travel and Expense.
103
+
In this section, you'll enable B.Simon to use Azure single sign-on by granting access to SAP Concur Travel and Expense.
104
104
105
105
1. In the Azure portal, select **Enterprise Applications**, and then select **All applications**.
106
-
1. In the applications list, select **Concur Travel and Expense**.
106
+
1. In the applications list, select **SAP Concur Travel and Expense**.
107
107
1. In the app's overview page, find the **Manage** section and select **Users and groups**.
108
108
109
109
1. Select **Add user**, then select **Users and groups** in the **Add Assignment** dialog.
@@ -112,17 +112,17 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
112
112
1. If you are expecting a role to be assigned to the users, you can select it from the **Select a role** dropdown. If no role has been set up for this app, you see "Default Access" role selected.
113
113
1. In the **Add Assignment** dialog, click the **Assign** button.
114
114
115
-
## Configure Concur Travel and Expense SSO
115
+
## Configure SAP Concur Travel and Expense SSO
116
116
117
-
1. To automate the configuration within Concur Travel and Expense, you need to install **My Apps Secure Sign-in browser extension** by clicking **Install the extension**.
117
+
1. To automate the configuration within SAP Concur Travel and Expense, you need to install **My Apps Secure Sign-in browser extension** by clicking **Install the extension**.
2. After adding extension to the browser, click on **Set up Concur Travel and Expense** will direct you to the Concur Travel and Expense application. From there, provide the admin credentials to sign into Concur Travel and Expense. The browser extension will automatically configure the application for you and automate steps 3-7.
121
+
2. After adding extension to the browser, click on **Set up SAP Concur Travel and Expense** will direct you to the SAP Concur Travel and Expense application. From there, provide the admin credentials to sign into SAP Concur Travel and Expense. The browser extension will automatically configure the application for you and automate steps 3-7.
122
122
123
123

124
124
125
-
3. If you want to setup Concur Travel and Expense manually, in a different web browser window, you need to upload the downloaded **Federation Metadata XML** to [Concur SSO Self-Service Tool](https://www.concursolutions.com/nui/authadmin/ssoadmin) and sign in to your Concur Travel and Expense company site as an administrator.
125
+
3. If you want to setup SAP Concur Travel and Expense manually, in a different web browser window, you need to upload the downloaded **Federation Metadata XML** to [Concur SSO Self-Service Tool](https://www.concursolutions.com/nui/authadmin/ssoadmin) and sign in to your SAP Concur Travel and Expense company site as an administrator.
126
126
127
127
1. Click **Add**.
128
128
1. Enter a custom name for your IdP, for example "Azure AD (US)".
@@ -131,17 +131,17 @@ In this section, you'll enable B.Simon to use Azure single sign-on by granting a
### Create SAP Concur Travel and Expense test user
135
135
136
-
In this section, you create a user called B.Simon in Concur Travel and Expense. Work with Concur support team to add the users in the Concur Travel and Expense platform. Users must be created and activated before you use single sign-on.
136
+
In this section, you create a user called B.Simon in SAP Concur Travel and Expense. Work with Concur support team to add the users in the SAP Concur Travel and Expense platform. Users must be created and activated before you use single sign-on.
137
137
138
138
> [!NOTE]
139
139
> B.Simon's Concur login id needs to match B.Simon's unique identifier at Azure AD. For example, if B.Simon's Azure AD unique identifer is `[email protected]`. B.Simon's Concur login id needs to be `[email protected]` as well.
140
140
141
141
## Configure Concur Mobile SSO
142
142
To enable Concur mobile SSO, you need to give Concur support team **User access URL**. Follow steps below to get **User access URL** from Azure AD:
143
143
1. Go to **Enterprise applications**
144
-
1. Click **Concur Travel and Expense**
144
+
1. Click **SAP Concur Travel and Expense**
145
145
1. Click **Properties**
146
146
1. Copy **User access URL** and give this URL to Concur support
147
147
@@ -154,16 +154,16 @@ In this section, you test your Azure AD single sign-on configuration with follow
154
154
155
155
#### SP initiated:
156
156
157
-
* Click on **Test this application** in Azure portal. This will redirect to Concur Travel and Expense Sign on URL where you can initiate the login flow.
157
+
* Click on **Test this application** in Azure portal. This will redirect to SAP Concur Travel and Expense Sign on URL where you can initiate the login flow.
158
158
159
-
* Go to Concur Travel and Expense Sign-on URL directly and initiate the login flow from there.
159
+
* Go to SAP Concur Travel and Expense Sign-on URL directly and initiate the login flow from there.
160
160
161
161
#### IDP initiated:
162
162
163
-
* Click on **Test this application** in Azure portal and you should be automatically signed in to the Concur Travel and Expense for which you set up the SSO
163
+
* Click on **Test this application** in Azure portal and you should be automatically signed in to the SAP Concur Travel and Expense for which you set up the SSO
164
164
165
-
You can also use Microsoft My Apps to test the application in any mode. When you click the Concur Travel and Expense tile in the My Apps, if configured in SP mode you would be redirected to the application sign on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the Concur Travel and Expense for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
165
+
You can also use Microsoft My Apps to test the application in any mode. When you click the SAP Concur Travel and Expense tile in the My Apps, if configured in SP mode you would be redirected to the application sign on page for initiating the login flow and if configured in IDP mode, you should be automatically signed in to the SAP Concur Travel and Expense for which you set up the SSO. For more information about the My Apps, see [Introduction to the My Apps](../user-help/my-apps-portal-end-user-access.md).
166
166
167
167
## Next steps
168
168
169
-
Once you configure Concur Travel and Expense you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-any-app).
169
+
Once you configure SAP Concur Travel and Expense you can enforce session control, which protects exfiltration and infiltration of your organization’s sensitive data in real time. Session control extends from Conditional Access. [Learn how to enforce session control with Microsoft Cloud App Security](/cloud-app-security/proxy-deployment-any-app).
0 commit comments