Coupa - Opal Security Docs

Opal’s integration with Coupa allows you to manage access to Coupa roles and users.

Supported resources

Resource	Read	Grant and revoke access
Coupa Roles	✔️	✔️

Requirements

Before you begin, you must:

Be an Opal Admin
Be on version 1.1050.0, if you self-host Opal

1. Create OAuth client in Coupa

To allow Opal to access to your Coupa roles and grant permission to assign and remove roles from users, you must first create an OAuth client. Select Client credentials as the Grant type, and set the following scopes:

core.user.read
core.user.write
core.user_group.read
core.user_group.write
core.common.read

Save the Client ID and Client Secret and return to Opal.

2. Create Coupa app in Opal

In Opal, go to Inventory > +App and select Coupa. Name your Coupa app, provide a description, and enter the Client ID and Client Secret from step 1. After you save the app, you can import roles from … > Import items.

Last modified on October 28, 2025