Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleCan you create your own OAuth2 apps or does SnapLogic create them for you?

Yes, you must create your own OAuth2 application in the Coupa portal and obtain the Client ID and Secret Key to use it in the SnapLogic Coupa account.

Expand
titleCan refresh and/or access token expirations be customized? What are the minimums/maximums/defaults?

The default access token expiry is 24 hours, and currently, there is no information on customizing token expiry. Coupa generates an access token which lasts for 24 hours, so Coupa’s recommendation is to renew the token every 20 hours (like a refresh token).

We recommend creating a new token call before the existing token expires.

To get a refresh_token, you must enable the offline_access scope in the Oauth app, which must be passed in the authorization request. We do not have clear data on the refresh token expiry.

Expand
titleWhat scopes are mandatory and optional?

When creating the Oauth app, Coupa shows you the available scopes list. You must select relevant scopes as per your use case. Although there are no mandatory scopes, but you must select at least one scope to create the app.

When you register a client app, you must assign scopes for the client. Scopes are required and determine what the client/application is allowed to do. 

Expand
titleDo previous access and/or refresh tokens get invalidated if newer tokens are acquired for the same Client ID?

No, the old token does not after acquiring a new token for the same client ID.

Expand
titleCan tokens be invalidated at any time?

We would say No at the moment, and there are not any token revoke endpoints specified in the Coupa documentation.

Related Content

...