Overview

The Identity v4 service is designed to create, update, and read user’s core identity profile. This service is also available to look up the SAP Concur UUID to access any v4 API for a single user only.

This API is used to help provision and manage user accounts and profile details across multiple SAP Concur products, including Expense, Invoice, Request, Travel, and TripIt.

Limitations: Only the GET operations are available at this time. This API is not available in the China Data Center. This API is only available to partners who have been granted access by SAP Concur. Access to this documentation does not provide access to the API.

Products and Editions

  • Concur Expense Professional Edition
  • Concur Expense Standard Edition
  • Concur Travel Professional Edition
  • Concur Travel Standard Edition
  • Concur Invoice Professional Edition
  • Concur Invoice Standard Edition
  • Concur Request Professional Edition
  • Concur Request Standard Edition

Scope Usage

Name Description Endpoint
identity.user.ids.read Read user ID data. GET
identity.user.core.read Read user core data. GET
identity.user.coresensitive.read Read core sensitive data. GET
identity.user.enterprise.read Read user enterprise data. GET
identity.user.coreenterprise.writeonly Write access to all core and enterprise fields except externalID. PUT, POST, PATCH
identity.user.externalID.writeonly Write access to externalID only. PUT, POST, PATCH

For more information on scope usage and mapping, please see the Identity v4 Scope Mapping page.

Dependencies

None.

Access Token Usage

This API supports only company level access tokens.

Retrieve Users

Retrieves all users of a given company. The filter operation can be used to fetch a unique user’s identity information.

Request

URI

Template
GET https://us.api.concursolutions.com/profile/identity/v4/Users

GET https://us.api.concursolutions.com/profile/identity/v4/Users?count=20

GET https://us.api.concursolutions.com/profile/identity/v4/Users/<UUID>

GET https://us.api.concursolutions.com/profile/identity/v4/Users?filter=attributes eq "value"
Parameters
Name Type Format Description
filter string - The filter string used to request a subset of resources.
attributes object - A multi-valued list of strings indicating the names of resource attributes to return in the response. It is comma delimited.
userName string user@domain The requested user’s username. NOTE: The userName must be unique across all SAP Concur products. If a userName is currently in use in any SAP Concur product, it cannot be assigned again unless the original occurrence is changed. For example, assume that a userName was assigned in error. That userName can only be used again if an admin (either manually or via import) renames the original occurrence, allowing the userName to be used again. The following characters cannot be used as a value for this record: % [ # ! * & ( ) ~ ‘ { ^ } \ / ? > < , ; : “ + = ], and pipe.
companyId string - Required, if employeeNumber is used The ID of the company the user belongs to.
employeeNumber string - Required, if companyId is used User’s employee number.
externalId string - User’s external ID.
excludedAttributes string - A multi-valued list of strings indicating the names of resource attributes to be removed from the default set of attributes to return.
startIndex string - The 1-based index of the first query result. Default: 1
count string - The desired maximum number of query results per page. Maximum count: 100. Default: 10

Headers

Payload

None.

Response

Status Codes

Headers

Payload

User Schema

Example

Request

GET https://us.api.concursolutions.com/profile/identity/v4/users/
Accept: application/json
Authorization: BEARER {token}

Response

200 OK
Content-Type: application/json

{
  "schemas": [
    "urn:ietf:params:scim:api:messages:2.0:ListResponse"
  ],
  "totalResults": 107705,
  "startIndex": 1,
  "itemsPerPage": 20,
  "Resources": [
    { User 1 …},
    {User 2…},…
    {User 20…}
  ]
}

Retrieve a User’s Identity Profile

Retrieves a unique user based on the user’s UUID.

Request

URI

Template
GET https://us.api.concursolutions.com/profile/identity/v4/Users/
Parameters
Name Type Format Description
id string - Requested user’s UUID.

Headers

Payload

None.

Response

Status Codes

Headers

Payload

User Schema

Example

Request

GET https://us.api.concursolutions.com/profile/identity/v4/Users/
Accept: application/json
Authorization: BEARER {token}

Response

200 OK
Content-Type: application/json

{
  "active": true,
  "addresses": [
    {
      "country": "string",
      "locality": "string",
      "postalCode": "string",
      "region": "string",
      "streetAddress": "string",
      "type": "work"
    }
  ],
  "dateOfBirth": "string",
  "displayName": "string",
  "emails": [
    {
      "dateAdded": "string",
      "dateVerified": "string",
      "notifications": true,
      "type": "work",
      "value": "string",
      "verified": true
    }
  ],
  "emergencyContacts": [
    {
      "country": "string",
      "emails": [
        "string"
      ],
      "locality": "string",
      "name": "string",
      "phones": [
        "string"
      ],
      "postalCode": "string",
      "region": "string",
      "relationship": "Spouse",
      "streetAddress": "string"
    }
  ],
  "entitlements": [
    "Expense"
  ],
  "externalId": "string",
  "gender": "Male",
  "id": "string",
  "localeOverrides": {
    "preference24Hour": "h:mm AM/PM",
    "preferenceCurrencySymbolLocation": "BeforeAmount",
    "preferenceDateFormat": "mm/dd/yyyy",
    "preferenceDefaultCalView": "day",
    "preferenceDistance": "mile",
    "preferenceEndDayViewHour": 0,
    "preferenceFirstDayOfWeek": "Monday",
    "preferenceHourMinuteSeparator": ":",
    "preferenceNegativeCurrencyFormat": "-100",
    "preferenceNegativeNumberFormat": "-100",
    "preferenceNumberFormat": "1,000.00",
    "preferenceStartDayViewHour": 0
  },
  "meta": {},
  "name": {
    "familyName": "string",
    "formatted": "string",
    "givenName": "string",
    "hasNoMiddleName": true,
    "honorificPrefix": "Miss",
    "honorificSuffix": "Jr.",
    "legalName": "string",
    "middleInitial": "string",
    "middleName": "string"
  },
  "nickName": "string",
  "phoneNumbers": [
    {
      "display": "string",
      "notifications": true,
      "operatingSystem": "Android Phone",
      "primary": true,
      "type": "work",
      "value": "string"
    }
  ],
  "preferredLanguage": "string",
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User"
  ],
  "timezone": "string",
  "title": "string",
  "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
    "companyId": "string",
    "costCenter": "string",
    "department": "string",
    "division": "string",
    "employeeNumber": "string",
    "manager": {
      "$ref": "string",
      "displayName": "string",
      "employeeNumber": "string",
      "value": "string"
    },
    "orgUnit": "string",
    "organization": "string",
    "self": {
      "$ref": "string",
      "displayName": "string",
      "employeeNumber": "string",
      "value": "string"
    },
    "startDate": "string",
    "terminationDate": "string"
  },
  "userName": "string"
}

Create a User’s Identity Profile

Important: This API is currently in pre-release status and is only available to approved early access participants. The API is under development and might change before being generally released. To become an early access participant, contact your SAP Concur Representative.

Creates a user’s identity profile.

Request

URI

Template
POST https://us.api.concursolutions.com/profile/identity/v4/Users
Parameters
Name Type Format Description
user string - The user identity to create.

Headers

Payload

None.

Response

Status Codes

Headers

Payload

User Schema

Example

Request

{
  "userName": "SAPDemoUser_User222@example.com",
  "active": true,
   "name": {
      "familyName": "SAPDemoUser",
      "givenName": "User222"
   },
  "emails": [
    {
        "value": "SAPDemoUser_User222@example.com"
    }
  ],
   "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
      "companyId": "aa076ada-80a9-4f57-8e98-9300b1c3171d"
    }
}

Response

{
  "meta": {
    "resourceType": "User",
    "created": "2020-08-14T23:07:02.000739Z",
    "lastModified": "2020-08-14T23:07:02.000739Z",
    "version": 0,
    "location": "https://us.api.concursolutions.com/profile/identity/v4/users/b38316e0-e2f6-48c8-bb3b-193d4faef578"
  },
  "displayName": "User222",
  "name": {
    "familyName": "SAPDemoUser",
    "givenName": "User222",
    "formatted": "SAPDemoUser, User222 "
  },
  "phoneNumbers": [],
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User",
    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
  ],
  "active": true,
  "id": "b38316e0-e2f6-48c8-bb3b-193d4faef578",
  "emails": [
    {
      "value": "SAPDemoUser_User222@example.com"
    }
  ],
  "userName": "SAPDemoUser_User222@example.com",
  "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
    "companyId": "aa076ada-80a9-4f57-8e98-9300b1c3171d"
  }
}

Update a User’s Identity Profile

Important: This API is currently in pre-release status and is only available to approved early access participants. The API is under development and might change before being generally released. To become an early access participant, contact your SAP Concur Representative.

Updates applicable attributes in the user’s identity profile.

Request

URI

Template
PATCH https://us.api.concursolutions.com/profile/identity/v4/Users/UUID
Parameters
Name Type Format Description
id string - The user’s UUID.

Headers

Payload

None.

Response

Status Codes

Headers

Payload

User Schema

Example

Request

{
    "Operations": [
        {
            "op": "add",
	"path" : "externalId",
            "value": "123-222"
				}
            ]
 }

Response

{
  "localeOverrides": {
    "preferenceEndDayViewHour": 20,
    "preferenceFirstDayOfWeek": "Sunday",
    "preferenceDateFormat": "mm/dd/yyyy",
    "preferenceCurrencySymbolLocation": "BeforeAmount",
    "preferenceHourMinuteSeparator": ":",
    "preferenceDefaultCalView": "month",
    "preference24Hour": "H:mm",
    "preferenceNumberFormat": "1,000.00",
    "preferenceStartDayViewHour": 8,
    "preferenceNegativeCurrencyFormat": "-100"
  },
"title": null,
  "addresses": [
    {
      "country": "US",
      "streetAddress": null,
      "postalCode": null,
      "locality": null,
      "type": "home",
      "region": null
    },
    {
      "country": "US",
      "streetAddress": null,
      "postalCode": null,
      "locality": null,
      "type": "work",
      "region": null
    }
  ],
  "timezone": "America/New_York",
  "meta": {
    "resourceType": "User",
    "created": "2020-08-14T23:07:02.000739Z",
    "lastModified": "2020-08-14T23:07:04.000900Z",
    "version": 2,
    "location": "https://us.api.concursolutions.com/profile/identity/v4/users/b38316e0-e2f6-48c8-bb3b-193d4faef578"
  },
  "displayName": "User222",
  "name": {
    "honorificSuffix": null,
    "hasNoMiddleName": true,
    "formatted": "SAPDemoUser, User222 ",
    "familyName": "SAPDemoUser",
    "givenName": "User222",
    "honorificPrefix": null,
    "middleName": null
  },
  "phoneNumbers": [],
  "emergencyContacts": [
    {
      "country": null,
      "streetAddress": null,
      "postalCode": null,
      "name": null,
      "locality": null,
      "phones": [],
      "region": null,
      "relationship": "Other"
    }
  ],
  "preferredLanguage": "en-US",
  "dateOfBirth": null,
  "nickName": null,
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User",
    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
  ],
  "externalId": "123-222",
  "active": true,
  "id": "b38316e0-e2f6-48c8-bb3b-193d4faef578",
  "gender": null,
  "emails": [],
  "userName": "SAPDemoUser_User222@example.com",
  "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
    "terminationDate": null,
    "companyId": "aa076ada-80a9-4f57-8e98-9300b1c3171d",
    "manager": null,
    "costCenter": null,
    "orgUnit": null,
    "startDate": "2020-08-14T23:07:00.000",
    "employeeNumber": null
  }
}

Replace a User’s Identity Profile

Important: This API is currently in pre-release status and is only available to approved early access participants. The API is under development and might change before being generally released. To become an early access participant, contact your SAP Concur Representative.

Replaces a user’s identity profile.

Request

URI

Template
PUT https://us.api.concursolutions.com/profile/identity/v4/Users/UUID
Parameters
Name Type Format Description
id string - The user’s UUID.
user string - The user identity to update.

Headers

Payload

User Schema

Response

Status Codes

Headers

Payload

User Schema

Example

Request

{
  "active": true,
  "addresses": [
    {
      "country": "string",
      "locality": "string",
      "postalCode": "string",
      "region": "string",
      "streetAddress": "string",
      "type": "work"
    }
  ],
  "dateOfBirth": "string",
  "displayName": "string",
  "emails": [
    {
      "dateAdded": "string",
      "dateVerified": "string",
      "notifications": true,
      "type": "work",
      "value": "string",
      "verified": true
    }
  ],
  "emergencyContacts": [
    {
      "country": "string",
      "emails": [
        "string"
      ],
      "locality": "string",
      "name": "string",
      "phones": [
        "string"
      ],
      "postalCode": "string",
      "region": "string",
      "relationship": "Spouse",
      "streetAddress": "string"
    }
  ],
  "entitlements": [
    "Expense"
  ],
  "externalId": "string",
  "gender": "Male",
  "id": "string",
  "localeOverrides": {
    "preference24Hour": "h:mm AM/PM",
    "preferenceCurrencySymbolLocation": "BeforeAmount",
    "preferenceDateFormat": "mm/dd/yyyy",
    "preferenceDefaultCalView": "day",
    "preferenceDistance": "mile",
    "preferenceEndDayViewHour": 0,
    "preferenceFirstDayOfWeek": "Monday",
    "preferenceHourMinuteSeparator": ":",
    "preferenceNegativeCurrencyFormat": "-100",
    "preferenceNegativeNumberFormat": "-100",
    "preferenceNumberFormat": "1,000.00",
    "preferenceStartDayViewHour": 0
  },
  "meta": {},
  "name": {
    "academicTitle": [
      "Dr."
    ],
    "familyName": "string",
    "familyNamePrefix": "string",
    "formatted": "string",
    "givenName": "string",
    "hasNoMiddleName": true,
    "honorificPrefix": "Miss",
    "honorificSuffix": "Jr.",
    "legalName": "string",
    "middleInitial": "string",
    "middleName": "string"
  },
  "nickName": "string",
  "phoneNumbers": [
    {
      "display": "string",
      "notifications": true,
      "operatingSystem": "Android Phone",
      "primary": true,
      "type": "work",
      "value": "string"
    }
  ],
  "preferredLanguage": "string",
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User"
  ],
  "timezone": "string",
  "title": "string",
  "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
    "companyId": "string",
    "costCenter": "string",
    "department": "string",
    "division": "string",
    "employeeNumber": "string",
    "manager": {
      "$ref": "string",
      "displayName": "string",
      "employeeNumber": "string",
      "value": "string"
    },
    "orgUnit": "string",
    "organization": "string",
    "self": {
      "$ref": "string",
      "displayName": "string",
      "employeeNumber": "string",
      "value": "string"
    },
    "startDate": "string",
    "terminationDate": "string"
  },
  "userName": "string"
}

Response

{
  "meta": {
    "resourceType": "User",
    "created": "2020-08-14T23:07:02.000739Z",
    "lastModified": "2020-08-14T23:07:02.000739Z",
    "version": 0,
    "location": "https://us.api.concursolutions.com/profile/identity/v4/users/b38316e0-e2f6-48c8-bb3b-193d4faef578"
  },
  "displayName": "User222",
  "name": {
    "familyName": "SAPDemoUser",
    "givenName": "User222",
    "formatted": "SAPDemoUser, User222 "
  },
  "phoneNumbers": [],
  "schemas": [
    "urn:ietf:params:scim:schemas:core:2.0:User",
    "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
  ],
  "active": true,
  "id": "b38316e0-e2f6-48c8-bb3b-193d4faef578",
  "emails": [
    {
      "value": "SAPDemoUser_User222@example.com"
    }
  ],
  "userName": "SAPDemoUser_User222@example.com",
  "urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
    "companyId": "aa076ada-80a9-4f57-8e98-9300b1c3171d"
  }
}

Schema

User

Name Type Format Description
active boolean true/false Required If true, the user is active.
addresses object - A physical mailing address for this user. Examples: work, home, other
addresses.country string - A two-letter country code defined in ISO 3166-1 alpha-2.
addresses.locality string - The city or locality.
addresses.postalCode string - The zip code or postal code.
addresses.region string - The state or region.
addresses.streetAddress string - The full street address component, which may include house number, street name, P.O. box, and multi-line extended street address information.
addresses.type string - A label indicating the function of the address. Examples: work, home
dateOfBirth string YYYY-MM-DD The user’s date of birth.
displayName string - The name of the user, suitable for public display.
emails object - Required Email addresses for the user. The value should be canonicalized by the service provider.
dateAdded string - The date and time the email was added to the user’s profile.
dateVerified string - The date and time the email was verified.
emails.notifications boolean true/false If true, notifications have been opted-in for emails.
emails.type string - A label indicating the attribute’s function. Examples: work, home
emails.value string - Required Email address value.
emails.verified boolean true/false If true, the email has been verified by the user.
emergencyContacts object - Emergency contact information for the user.
emergencyContacts.country string - A two-letter country code defined in ISO 3166-1 alpha-2.
emergencyContacts.emails string - Emails of the emergency contact.
emergencyContacts.locality string - The city or locality of the emergency contact.
emergencyContacts.name string - Required The emergency contact’s name.
emergencyContacts.phones string - Phone numbers of the emergency contact.
emergencyContacts.postalCode string - The zip code or postal code of the emergency contact.
emergencyContacts.region string - The state or region of the emergency contact.
emergencyContacts.relationship string - Required The emergency contact’s relationship to the user. Supported values: Spouse, Brother, Parent, Sister, Life Partner, Other
emergencyContacts.streetAddress string - The full street address component, which may include house number, street name, P.O. box, and multi-line extended street address information.
entitlements string - The features enabled for the user. Supported values: Expense, Invoice, Locate, Request, Travel
externalId string - User identifier from the provisioning client.
gender string - The user’s gender.
id string - Required. Read Only Unique identifier for the user, also known as the UUID.
localeOverrides object - Read Only Support for users who want to override locale settings.
localeOverrides.preference24Hour string - Preferred 24 hour format for the user. Supported values: h:mm AM/PM, H:mm
localeOverrides.preferenceCurrencySymbolLocation string - Preferred currency symbol location for the user. Supported values: BeforeAmount, AfterAmount
localeOverrides.preferenceDateFormat string - Preferred date format for the user.
localeOverrides.preferenceDefaultCalView string - Preferred default calendar view for the user. Supported values: day, week, month
localeOverrides.preferenceDistance string - Preferred distance metric. Supported values: mile, km
localeOverrides.preferenceEndDayViewHour integer - Preferred hour setting for the end of day. Supported values: 0-23
localeOverrides.preferenceFirstDayOfWeek string - Preferred first day of the week for the user.
localeOverrides.preferenceHourMinuteSeparator string - Preferred separator between hour and minute. Supported values: :, .
localeOverrides.preferenceNegativeCurrencyFormat string - Preferred negative currency format for the user.
localeOverrides.preferenceNegativeNumberFormat string - Preferred negative number format for the user.
localeOverrides.preferenceNumberFormat string - Preferred number format for the user.
localeOverrides.preferenceStartDayViewHour integer - Preferred start of day for the user, from 1.
meta object - Read Only
name object - Required The user’s name.
name.academicTitle string - Title signifying level of academic achievement.
familyName string - Required The family or last name of the user.
name.familyName string - Required The family or last name of the user.
name.familyNamePrefix string - The family name prefix of the user, if applicable.
name.formatted string - The full name of the user, formatted for display. Example: Jensen, Barbara Jane
name.givenName string - Required The given or first name of the user.
name.hasNoMiddleName boolean true/false If true, the user has a middle name.
name.honorificPrefix string - The honorific or title prefix(es) of the user.
name.honorificSuffix string - The honorific suffix(es) of the user.
name.legalName string - The legal name of the user.
name.middleInitial string - The middle initial of the user, if applicable.
name.middleName string - The middle name(s) of the user, if applicable.
name.nickName string - The casual way to address the user. This attribute should not be used to represent a user’s username.
phoneNumbers object - Phone numbers for the user. The value should be canonicalized by the service provider according to the format specified in RFC 3966. Duplicates are not allowed for types other than mobile.
phoneNumbers.display string - A human-readable phone number for display.
phoneNumbers.notifications boolean true/false If true, notifications have been opted in for phone numbers. This is only available for mobile phone numbers.
phoneNumbers.operatingSystem string - The operating system of the device, when the phone is a cellphone type.
phoneNumbers.primary boolean true/false If true, this is the primary mobile device. This is only available for mobile phone numbers. One mobile phone number must be set as the primary number and only one phone number can be set to primary at a time.
phoneNumbers.type string - A label indicating the attribute’s function. Examples: work, home, mobile
phoneNumbers.value string - Required The phone number value.
preferredLanguage string - Indicates the user’s preferred written or spoken language.
timezone string - The user’s time zone in the Olson time zone database format. Example: America/Los_Angeles
title string - The user’s job title in the company.
companyId string - Required. Immutable The SAP Concur ID of the company.
costCenter string - The employee cost center for product. The value of this parameter is provisioned and is not related to the Concur Expense costCenter.
department string - Client supplied department name. The value of this parameter is provisioned and is not related to the Concur Expense department.
division string - Client supplied division name. The value of this parameter is provisioned and is not related to the Concur Expense division.
employeeNumber string - Client supplied employee number within the company, unique for the company.
manager object - The manager of this user.
$ref string - The URI of the SCIM resource representing the referenced user.
displayName string - Read Only The referenced user’s display name.
employeeNumber string - The referenced user’s employee number, if it is an Enterprise user.
value string - The referenced user’s UUID.
orgUnit string - Client supplied org unit name. The value of this parameter is provisioned and is not related to the Concur Expense orgUnit.
organization string - Read Only The company name.
self object - A reference to this user.
$ref string - The URI of the SCIM resource representing the referenced user.
displayName string - Read Only The referenced user’s display name.
employeeNumber string - The referenced user’s employee number, if it is an Enterprise user.
value string - The referenced user’s UUID.
startDate string YYYY-MM-DD The user’s start date.
terminationDate string YYYY-MM-DD The user’s termination date.
userName string user@domain Required The name that can be used to login to Concur Travel and Expense. NOTE: The userName must be unique across all SAP Concur products. If a userName is currently in use in any SAP Concur product, it cannot be assigned again unless the original occurrence is changed. For example, assume that a userName was assigned in error. That userName can only be used again if an admin (either manually or via import) renames the original occurrence, allowing the userName to be used again. The following characters cannot be used as a value for this record: % [ # ! * & ( ) ~ ‘ { ^ } \ / ? > < , ; : “ + = ] and pipe

UserList

Name Type Format Description
totalResults integer - The total number of results matching the client query.
itemsPerPage integer - The number of query results returned in a query response page.
startIndex integer - The 1-based index of the first result in the current set of query results.
Resources User - -

Company

Name Type Format Description
active boolean true/false Required If true, the company is active.
addresses object - -
country string - A two-letter country code defined in ISO 3166-1 alpha-2.
locality string - The city or locality of the company address.
postalCode string - The zip code or postal code of the company address.
region string - The state or region of the company address.
streetAddress string - The full street address component, which may include house number, street name, P.O. box, and multi-line extended street address information.
companyDomain string - The company’s company domain name.
contact object - -
country string - A two-letter country code defined in ISO 3166-1 alpha-2.
emails string - Emails of the contact.
locality string - The city or locality of the contact.
name string - Required Name of the contact.
phones string - Phone numbers of the contact.
postalCode string - The zip code or postal code of the contact.
region string - The state or region.
streetAddress string - The full street address component, which may include house number, street name, P.O. box, and multi-line extended street address information.
defaultLanguage string - Indicates the default language for the company.
entitlements string - The features enabled for the company. Supported values: Expense, Invoice, Locate, Request, Travel
id string - Required Unique identifier for the company, also known as the company UUID.
internetDomain string - The company’s internet domain name.
meta object - -
name string - The name of the company.
schemas string - Read Only
loginPolicy object - -
hideForgotLoginIdLink boolean true/false If true, the Forgot LoginId Link will be hidden.
loginFailureLockoutDuration integer - The duration of the login failure lockout.
loginFailureWindowDuration integer - The window duration of the login failure.
loginFailuresAllowed integer - The amount of login failures allowed.
loginIPRestriction string - The login IP restrictions.
loginOneTimeLinkExpirationLength integer - The length of the one time login expiration link.
loginViaSsoOnly boolean true/false If true, the login is available via SSO only.
passwordPolicy object - -
daysUntilExpiration integer - Number of days until password expiration.
expirePasswordOnUserCreation boolean true/false If true, the password will expire on user creation.
maxLength integer - Maximum length of the password.
minLength integer - Minimum length of the password.
mobileAuthenticationLifetime integer - The mobile session timeout in seconds.
mobileMinLength integer - The minimum length of the password for mobile.
mobileRequiresMixedCase boolean true/false If true, the password will require mixed cases for mobile.
mobileRequiresNonalphanum boolean true/false If true, the password will require non-alphanumeric characters for mobile.
numGenerationsBeforeCanReuse integer - Number of generations before the password can be reused.
numSecurityQuestions integer - The number of required security questions.
numSecurityQuestionsUsersPick integer - The number of security questions users can pick.
passwordResetEmailPolicy string - When the password reset email should be sent. Supported values: never, anyTime, afterFirstLogin
passwordResetSupportEmail string - The from address of the password or PIN reset email.
requiresMixedCase boolean true/false If true, the password will require mixed cases.
requiresNonAlpha boolean true/false If true, the password will requires non-alphabetic characters.
requiresNonAlphanum boolean true/false If true, the password will require non-alphanumeric characters.
requiresNumber boolean true/false If true, the password will require numbers.
requiresSecurityQuestions boolean true/false If true , security questions will be required.
restrictPasswordResetOncePerDay boolean true/false If true, password resets will be limited to once a day.
channels string - -
enabled boolean true/false If true, channels will be enabled.
tenantIdSpend string - The ID of the spend tenant for the company.
tenantIdTravel string - The ID of the travel tenant for the company.

Schema Extension

Name Type Format Description
schema string - Required The string identifier of the extension.
required boolean true/false Required If true, this extension is a required part of the schema.

Resource Type

Name Type Format Description
attributes SchemaExtension - Required The resource’s extensions.
description string - Required The resource’s description.
endpoint string - Required The resource’s HTTP addressable endpoint relative to the base URL. Example: /Users
id string - Required The resource’s ID.
name string - Required The resource’s name. Example: User
schema string - Required The resource’s associated schema.

Authenticated Schemas

Name Type Format Description
description string - Required The description of the authentication schema.
documentationUrl string - Required An HTTP addressable URL pointing to the authentication schema’s usage documentation.
name string - Required The common authentication schema name. Example: HTTP Basic
specUrl string - Required An HTTP addressable URL pointing to the authentication schema’s specification.

Service Provider Config

Name Type Format Description
authenticationSchemes AuthenticationSchemes - Required Specifies supported authentication schema properties.
bulk ServiceProviderConfigSetting - Required Details about the feature support for the service provider.
changePassword ServiceProviderConfigSetting - Required Details about the feature support for the service provider.
documentationUrl string - Required An HTTP addressable URL pointing to the service provider’s help documentation.
etag ServiceProviderConfigSetting - Required Details about the feature support for the service provider.
filter ServiceProviderConfigSetting - Required Details about the feature support for the service provider.
patch ServiceProviderConfigSetting - Required Details about the feature support for the service provider.
sort ServiceProviderConfigSetting - Required Details about the feature support for the service provider.

Service Provider Config Setting

Name Type Format Description
supported boolean true/false If true, the feature is supported.

Concur Error

Name Type Format Description
messages object - Additional messages in case of errors/warnings.
code string - Required The error message code.
message string - The error message description.
schemaPath string - The relative schema path of attribute.
type string - Required The error message type. Supported values: error, warning

Error Response

Name Type Format Description
scimType string - The SCIM detail error keyword.
detail string - The human readable message.
status string - Required The HTTP status code.