Before establishing a connection with your Coupa instance, you will need to choose the Authentication Type. Currently, the following type is supported:
To create an OAuth connection, you will have to provide the following credentials:
- OAuth Scope
- Client ID
To obtain the necessary credentials, you will first have to log in to Coupa as an integrations-enabled administrator to create a Client using a Client credentials Grant Type.
Log in to your Coupa instance and click the Setup button in the upper-right corner of the interface.
Scroll to the Integrations section and click Oauth2/OpenID Connect Clients.
The following Scopes are required for any connection and are pre-filled.
By default, the OAuth app must have the following scopes. The rest of the scopes must be filled in manually, depending on your case (see the table below).
Below is a list of objects and their respective scopes.
Write scopes are necessary only for Create/Update/Delete operations, whereas Read scopes are only needed for ListAll/List/Get operations.
The OAuth app must have, at all times, the same scopes that you manually provide when creating a connection. Otherwise, you will encounter issues. For example, if your OAuth App has the email, login, offline_access, openid, profile, core.common.read, and core.supplier.read scopes, then you must make sure to provide only these scopes when you add a Coupa connection.
The above steps were originally documented on the Coupa website on November 29, 2021. For updated information and more details regarding Coupa visit the OAuth 2.0 Getting Started with Coupa API page.
Updated 3 months ago