Coupa Approvals Access Requirements

Moveworks fetches all the approvals request created in your Coupa instance by reading the request and sending notifications to the appropriate approvers. This enables us to help approvers approve or deny purchase request through the bot. In order to do so we require access to your Coupa instance.

Access Setup Overview

Once you have completed the access setup, share these details with your Moveworks Customer Success team in an encrypted email:

  • Service account email
  • Service account password
  • Oauth2 client_id
  • Oauth2 client_secret
  • Scopes
  • Instance url

Access Setup Walkthrough

A service account for Moveworks in your instance is required as well as Oauth2 client setup so our system is able to authenticate with your Coupa instance.

How to create a new service account

  1. You can create a new user by navigating to SetupUsersCreate.

  2. Click on the check mark next to User under Roles. The User role is required to fetch all purchase requisitions and approve/deny it.

How to create a new Oauth2 client

  1. Oauth2 client are use to get access tokens, which we use to authorize with the APIs. To create a new Oauth2 client navigate to SetupIntegrationOauth2/Open ID clientsCreate a new client.

  2. Under Create Client, change the Grant type to be Client credentials.

  3. Fill in the the Login, Contact First Name, Contact Last Name, Contact Email details using the details of the service account which was created in the first step.

  4. Once we have these details we also need to provide the scopes to this client. These are the below scopes required:

    • core.approval.read
    • core.approval.write
    • core.requisition.read
    • core.user.read
    • core.user_group.read