Connecting Coupa Software
Last updated: March 16, 2026
Background
Lumos supports 2 integrations for Coupa. Both allow you to manage users' access.
Coupa (with Contract Ingestion) enables Lumos to pull in SaaS contracts from your Coupa instance and import them into the Vendors area of Lumos.
Instructions
Please pick which version of Coupa you want to use and follow the relevant instructions.
Note: If you wish to upgrade your existing Coupa integration to add contract ingestion, you will need to disconnect the existing integration, and add the new Coupa (with Contract Ingestion) integration.
Coupa Software
If this is your first time setting up a Coupa integration, we recommend you to follow Coupa's official instructions here. The following are abbreviated instructions:
Go to Setup > Oauth2/OpenID Connect Clients. You can type ‘oauth’ in the Search box to find it fast.
Click on Create. For Grant Type select: Client credentials. You can use the following client details:
Name: Lumos Integration Client
Login: lumos-integration
Contact First Name: Lumos
Contact Last Name: Integration
Contact Email: support@lumosidentity.com
Select the following scopes:
core.user.readcore.user.writeemailloginoffline_accessopenidprofilecore.user_group.readcore.user_group.writecore.common.read
Click on Save.
Filling the application tokens
Add your Coupa instance URL to
Instance Identifier, you need to follow this pattern: "domain.coupahost.com" or "domain.coupacloud.com".Add your Coupa integration client ID to Client ID.
Add your Coupa integration client Secret to Client Secret.
Coupa Software(with Contract Ingestion)
If this is your first time setting up a Coupa integration, we recommend you to follow Coupa's official instructions here. The following are abbreviated instructions:
Go to Setup > Oauth2/OpenID Connect Clients. You can type ‘oauth’ in the Search box to find it fast.
Click on Create. For Grant Type select: Client credentials. You can use the following client details:
Name: Lumos Integration Client
Login: lumos-integration
Contact First Name: Lumos
Contact Last Name: Integration
Contact Email: support@lumosidentity.com
Select the following scopes:
core.user.readcore.user.writeemailloginoffline_accessopenidprofilecore.user_group.readcore.user_group.writecore.common.readcore.contract.readcore.purchase_order.readcore.requisition.readcore.supplier.read
If you are upgrading an existing Coupa integration to enable Contract Ingestion, adding the highlighted scopes above is not enough. You will need to disconnect your existing Coupa integration, and then add the Coupa (with Contract Ingestion) integration.
Click on Save.
Filling the application tokens
Add your Coupa instance URL to
Instance Identifier, you need to follow this pattern: "domain.coupahost.com" or "domain.coupacloud.com".Add your Coupa integration client ID to Client ID.
Add your Coupa integration client Secret to Client Secret.
Coupa
Client ID*
To obtain your OAuth2 credentials, follow these steps:
Go to Setup > Oauth2/OpenID Connect Clients (you can type 'oauth' in the Search box to find it quickly).
Click on Create. For Grant Type select: Client credentials. Use the following client details:
Name: Lumos Integration Client
Login: lumos-integration
Contact First Name: Lumos
Contact Last Name: Integration
Contact Email: support@lumosidentity.com
Select the following scopes:
core.user.readcore.user.writecore.user_group.readcore.user_group.write
Click on Save.
Copy the generated Client ID and paste it Lumos.
Client Secret
Copy the Client Secret generated after saving your OAuth2 client configuration.
Instance Identifier
Your Coupa instance URL in the format 'domain.coupahost.com' or 'domain.coupacloud.com'.