In order to achieve connectivity between Concur and your server to send the Callout we need the following Prerequisites:

  • Web Server
  • Certificate signed by a Certificate Authority (CA)
  • TLS Certificate installed
  • HTTP Basic authentication

Web server configurations vary greatly so no specific recommendations on server configuration can be presented here. A certificate signed by a trusted Certificate Authority (CA) is required as we do not support self-signed Certificates. The TLS layer must be installed on top of the Network stack. Lastly, the authorization mechanism for the callouts is of type HTTP Basic or Basic Authorization and must present the appropriate web configuration file for your platform such as a web.xml or web.config file.

The above provides the security to connect over the Internet to your Server and ensures that no unauthorized calls are received by your Server.

Step One - Establish Connectivity

This endpoint will be used by Concur when registering the application connector, to verify that the HTTP authentication is working. It must be created and configured as below.

  • Endpoint: {servername}/system/v1.0/testconnection

    • Example:

  • This endpoint should use HTTP basic authorization.

  • The endpoint must be configured to return the following response to a POST request:

    • HTTP/1.1 200 OK

Step Two - Configure Callout URL

After the successful completion of the first step of implementing and testing the endpoint and your application connector, a configuration of the final endpoint will need to be performed.

  • Enter the endpoint that the Concur will connect to on the host.

    • Example: /attendee/v1.0/find

  • Select the Enabled check box if the endpoint is ready for use.

  • Save and test

Last Update: 06/2016

About Concur

Concur Blog


Concur is a leading provider of integrated travel and expense management solutions. More

  • 601 108th Ave NE, Suite 1000
  • Bellevue, WA 98004 USA
  • Phone: 800 401 8412
  • Fax: 425 590 5999

2016 © All Rights Reserved.

Privacy Policy


Terms of Use


API Deprecation Policy