Overview

Torii leverages the SAP Concur API, which allows Torii to automatically update your SaaS expenses without any user interaction.

Data

Torii syncs expense reports from your Concur account and matches SaaS-related expenses to their respective apps in Torii.

The following transaction fields are used for mapping expenses to the correct application: VendorDescription, BusinessPurpose, ExpenseTypeName, and SpendCategory.

Torii syncs transaction data up to one year prior to the first connection date.

Requirements

Account & Permissions

To connect the integration, a Concur Web Services subscription is required.

Scopes

The Concur integration uses different scopes depending on the functionality you want to enable: data sync only, or data sync plus user management actions.

Expense & Transaction Data Sync

These scopes are required to fetch expense reports, transactions, and related company data.

• receipts.read
• user.read
• company.read
• creditcardaccount.read
• expense.report.read
• purchaserequest.read
• user_read
• EXPRPT
• CCARD
• BANK
• EXTRCT
• FOP
• GHOST
• INVPMT
• INVVEN
• USER
• COMPANY

User Data Sync

These scopes allow Torii to sync Concur users and their identity-related data.

• identity.user.core.read
• identity.user.coresensitive.read
• identity.user.enterprise.read
• identity.user.ids.read
• spend.user.general.read

User Management Actions

The following scopes are required only if you want to use user management actions in Torii (for example, creating, updating, or deleting users in SAP Concur).

User provisioning and lifecycle management

• user.provision.write – Provision users (create and update users)
• user.provision.read – Read provisioning request status

User identity and profile data

• identity.user.core.read – Read basic user identity data
• identity.user.coresensitive.read – Read sensitive user identity data
• identity.user.enterprise.read – Read enterprise user attributes
• identity.user.ids.read – Read user ID data

User identity write permissions

• identity.user.coreenterprise.writeonly – Write core and enterprise user attributes
• identity.user.externalID.writeonly – Write external user IDs
• identity.user.emails.verified.writeonly – Write verified email addresses

Travel and Spend user data

• travel.user.general.read – Read general travel user data
• travel.user.private.read – Read private travel user data
• spend.user.general.read – Read spend user data
• spend.user.general.writeonly – Update spend user information

For a complete and up-to-date list of scopes and their usage, see the official SAP Concur documentation: User Provisioning API – Scope Usage .

Create a Torii application in Concur

Quick start: SAP provides a step-by-step tutorial that covers the entire process of creating an app, getting credentials, and obtaining a refresh token. You can follow it here: Create Tokens Required for Concur API Access . We also list the key steps below for your convenience.

To connect Concur to Torii, please follow these steps:

1. Go to your Concur portal. Under the Administration dropdown (upper right-hand corner), click Company → Web Services.
2. Create a new app in SAP Concur
   Follow SAP’s guide directly at this step: STEP 2 – Create a new app .
   • Make sure to enter two values in the Allowed Grants fields: refresh_token and password.
3. Ensure the required scopes listed above are assigned to your application.
4. Once you have registered the application, you will receive:
   • Client ID – A unique UUID4 identifier for your application.
   • Client Secret – Your application’s password.
   • Base URI – The domain where the SAP Concur entity resides.
     Example: https://us.api.concursolutions.com
     Different data centers (NA, EMEA, China, PSCC) will have different URIs. More info here .
   • Username and Password – A Concur user with a Web Services Admin or Proxy Logon role.

If you do not see Web Services under Administration → Company, you have two options:

• Reach out to Concur support/Partner Enablement Manager to get this feature enabled (may incur additional cost).
• Export transactions (CSV file) from Concur and import them into Torii.

Connect Concur integration to Torii

1. Go to the Integrations page and select the Concur tile.
   
2. Click Connect.
   
3. Enter your Client ID, Client Secret, and Base URI.
   
4. Select the preferred Authentication Type:
   • User Level Authentication – Provide Username & Password
   • Company Level Authentication – Provide Company UUID and Company Request Token (see instructions below or the Concur docs ).
5. Click Connect.
6. Once the integration is connected and synced, a green checkbox will appear.
   

Finding your Company UUID and Company Request Token

1. Go to Concur portal → Administration → Company → Authentication Admin.
2. Click Company Request Token.
3. Enter your App ID or Client ID in the App ID field.
4. Click Submit. The dialog will display your Company UUID and Company Request Token. Record them before closing.
   

Q&A

Q: I need expense data older than one year. Can I sync more?

A: By default, Torii syncs up to one year of expense data. If you need a longer history, please contact Torii Support. Note that syncing a large dataset may take significant time (up to several days).

Q: What should I enter in the "Account Name" field?

A: The Account Name field lets you connect multiple Concur accounts to Torii. The value can be anything you choose — it is only used to distinguish between your connected accounts. Make sure to use a unique Account Name for each account: connecting a different account with an Account Name that is already in use will overwrite the existing account's data, so choosing distinct names is your responsibility.