Coupa OIN Application Provisioning Error when Enabling Okta Identity Governance (OIG)

Missing OpenID Connect (OIDC) scopes in the Coupa application cause a provisioning error when enabling the Governance Engine. Add the required scopes in the Coupa web administration portal to resolve the error. When enabling the Governance Engine for the Coupa Okta Integration Network (OIN) application, Okta generates the following error during provisioning attempts:

OAuth credentials must be authenticated first before saving.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Integration Network (OIN)
• Coupa OIN Application
• Okta Identity Governance (OIG)
• Governance Engine

The OpenID Connect (OIDC) settings in Coupa lack the required scopes.

What steps are needed to resolve the missing OpenID Connect scopes in Coupa?

Navigate to the Coupa web administration portal and configure the OAuth2 and OpenID Connect client settings to include the required scopes for Coupa and Entitlements.

1. Open the Coupa web administration portal.
2. Navigate to Setup and choose OAuth2/OpenID Connect Clients.
3. Add the following scopes:
   • openid
   • offline_access
   • core.user.read
   • core.user.write
   • core.common.read