• Home
• App Integrations
• Single Sign-On Integrations
• SAP Concur SAML SSO

Configure SAP Concur SAML SSO

---

SAP SSO solutions by miniOrange provide secure Single Sign-On access into SAP Concur and all your SAP apps using a single set of login credentials. You can log into SAP Concur using your miniOrange credentials or Azure AD credentials or any other identity providers. With miniOrange SAP SSO, along with SAP Concur you can also login into other On-Premise and Cloud Applications using your existing Identity Providers/User Store (Azure Active Directory, Okta, Ping) credentials. Follow the given setup guide to integrate SAML SSO for your SAP Concur account.

miniOrange and SAP Concur SAML SSO integration supports the following features:

• SP Initiated Single Sign-On (SSO)
• IdP Initiated Single Sign-On (SSO)

Follow the Step-by-Step Guide given below for SAP Concur Single Sign-On (SSO) configuration

1. Configure SAP Concur in miniOrange

• Login into miniOrange Admin Console.
• Go to Apps and click on Add Application button.



• In Choose Application, select SAML/WS-FED from the application type dropdown.



• Search for SAP Concur in the list, if you don't find SAP Concur in the list then, search for custom and you can set up your application in Custom SAML App.

• Login to your SSO management page of SAP Concur. Contact Concur Support if you are unable to access the login URL.
• Search for the Get SAP Concur Metadata under the Manage Single Sign-On. Here you can either copy the SAP Concur metadata URL or download the metadata file by clicking on Download button.



• Go back to your miniOrange Admin Dashboard to fill the metadata values.



• Click on Save.

Get IdP Metadata Details to upload to SAP Concur:

• Go to Apps >> Applications.
• Search for your app and click on the icon ' ' in Actions menu against your app.
• Click on Metadata to get metadata details, which will be required later. Click on Show SSO Link to see the IDP initiated SSO link for SAP Concur.



• Here you will see 2 options, if you are setting up miniOrange as IDP copy the metadetails related to miniOrange, if you required to be authenticated via external IDP's(okta,AZURE AD, ADFS, ONELOGIN, GOOGLE APPS) you can get metadata from the 2nd Section as shown below.



• Keep the Metadata URL and click on the Download Metadata button to download the Metadata XML file which you will require in Step 2.

2. Configure SSO in SAP Concur Workspace

• Go back to SAP Concur SSO login page >> Manage Single Sign-On.
• Search for IdP metadata section by scrolling down and click on Add button.



• Follow the given steps:

Custom IdP Name:	Enter the name of Identity Provider or any other name of your choice.
Provide link to your IdP's metadata or Upload your IdP's metadata :	Either paste the copied Metadata URL or upload the XML file that you downloaded from the Metadata section in Step 1.

• Click on Add Metadata.



• Configuration is done.

3. Test SSO Configuration

Test SSO login to your SAP Concur account with miniOrange IdP:

Using SP Initiated Login

• Go to your SAP Concur URL, here you will be either asked to enter the username or click on the SSO link which will redirect you to miniOrange IdP Sign On Page.



• Enter your miniOrange login credential and click on Login. You will be automatically logged in to your SAP Concur account.

Using IDP Initiated Login

• Login to miniOrange IdP using your credentials.



• On the Dashboard, click on SAP Concur application which you have added, to verify SSO configuration.





Not able to configure or test SSO?


Contact us or email us at idpsupport@xecurify.com and we'll help you setting it up in no time.

External References

• SAP's resource for Concur SAML SSO
• What is Single Sign-On (SSO) and How does SSO Work?
• SAP SSO, MFA & Provisioning Solution