Concur Single Sign-On Integration
The Concur Single Sign-on (SSO) Integration creates a client application that uses Auth0 for authentication and provides SSO capabilities for Concur. Your users log in to Concur with Auth0 identity providers, which means the identity provider performs the identity credentials verification.
Before you begin:
- Sign up for a Concur account.
- Set up a connection, which is a source of users. Connections can be databases, social identity providers, or enterprise identity providers, and can be shared among different applications. You may set up more than one connection for use with SSO integrations.
To configure a Concur SSO integration, you will:
Consent to Auth0 SSO integration
Navigate to Auth0 Dashboard > SSO Integrations, and click + Create SSO Integration.
Click Continue to grant the integration access to the listed permissions.
Configure Auth0 SSO Integration
Enter a name for your SSO Integration, and click Save.
Configure integration with Concur
To configure the integration with Concur, follow the instructions listed in the Tutorial view.
Concur SSO integration
Before you continue, make sure you have your SSO integration Client ID. You will use the Client ID to replace the
Concur requires you to contact their support team to setup SSO through SAML. Download your Auth0 signing certificate, and provide it to Concur.
Once configured on their side, you can use any of the links below for SSO (be sure to replace the SSO_CLIENT_ID placeholder with the Client ID of your SSO Integration):
Alternatively, to log in with a specific identity provider, you can add a
connection parameter (be sure to replace the SSO_CLIENT_ID placeholder with the Client ID of your SSO Integration):
In this case, Auth0 will redirect users to the specified connection and will not display the Login widget. Make sure you send the SAMLRequest using
Optionally, you can specify a Logout URL:
Choose the connections to use with your SSO integration. Users in enabled connections will be allowed to log in to Concur. By default, all configured connections are enabled.
Select the Connections view.
Toggle the sliders next to connection names to enable or disable them.