AWS marketplace: Document Coupa integration credentials and connection management
Summary
Adds documentation for Coupa procurement integration fields including Buyer ID, Supplier ID, shared secret credential, billing entity scoping, and managing additional connections.
Security assessment
The diff documents the shared secret used to authenticate cXML communication and advises keeping it secure, plus connection scoping and credential management. It is security guidance but does not reference a specific vulnerability or incident.
Evidence
+ * **Shared secret** – The credential used to authenticate the cXML communication between your Coupa system and AWS Marketplace. Keep this value secure.
Diff
diff --git a/marketplace/latest/buyerguide/procurement-system-integration-coupa.md b/marketplace/latest/buyerguide/procurement-system-integration-coupa.md index 2c69a4143..1f21cf473 100644 --- a//marketplace/latest/buyerguide/procurement-system-integration-coupa.md +++ b//marketplace/latest/buyerguide/procurement-system-integration-coupa.md @@ -28 +28 @@ We recommend that you use IAM managed permissions rather than manually configuri -After you have set up your IAM permissions, you are ready to configure AWS Marketplace integration with Coupa. Navigate to **Manage procurement**. In the **Manage procurement systems** pane, enter a name and description for the punchout. You can also switch the integration to test mode so that users can test the integration without creating product subscriptions until you're ready. To configure the AWS Marketplace portion of the integration, complete the following procedure. +After you have set up your IAM permissions, you are ready to configure AWS Marketplace integration with Coupa. Navigate to **Manage procurement**. In the **Manage procurement systems** pane, you configure a billing entity connection with the credentials and settings for your Coupa integration. You can also switch the integration to test mode so that users can test the integration without creating product subscriptions until you're ready. To configure the AWS Marketplace portion of the integration, complete the following procedure. @@ -32 +32 @@ After you have set up your IAM permissions, you are ready to configure AWS Marke - 1. From [AWS Marketplace Manage Procurement Systems](https://aws.amazon.com/marketplace/eprocurement/overview), under **Procurement systems** , choose **Set up Coupa integration**. + 1. From [Manage Procurement Systems](https://aws.amazon.com/marketplace/eprocurement/overview), under **Procurement systems** , choose **Set up Coupa integration**. @@ -34 +34,9 @@ After you have set up your IAM permissions, you are ready to configure AWS Marke - 2. On the **Manage Coupa integration** page, under **Account information** , enter the name and description of your integration. + 2. On the **Manage Coupa integration** page, under **Account information** , enter a name and description for your integration, and then configure the following fields: + + * **Buyer ID** – Your organization's unique identifier in Coupa. This identifies your organization as the buyer in the cXML exchange with AWS Marketplace. + + * **Supplier ID** – The AWS Marketplace supplier identifier for your Coupa system. This identifies which AWS endpoint receives purchase orders from your procurement portal. + + * **Shared secret** – The credential used to authenticate the cXML communication between your Coupa system and AWS Marketplace. Keep this value secure. + + * **Billing entities** (optional) – Select the AWS Billing entities (Seller of Record) that match the AWS Billing entity that you are setting up. If you don't select any, the connection accepts purchases from all AWS Billing entities. Select specific entities if your procurement portal uses different supplier configurations for different AWS Invoicing regions. @@ -38 +46 @@ After you have set up your IAM permissions, you are ready to configure AWS Marke -You might want your invoices in the AWS Billing console to reference the commerce extensible markup language (cXML) purchase order used to subscribe to your software as a service (SaaS) contract product. If so, you can enable the AWS Billing integration using a service-linked role in AWS Marketplace settings. +If you want your invoices in the AWS Billing and Cost Management console to reference the commerce extensible markup language (cXML) purchase order used to subscribe to your software as a service (SaaS) contract product, enable the AWS Billing and Cost Management integration using a service-linked role in AWS Marketplace settings. @@ -44,0 +53,27 @@ You might want your invoices in the AWS Billing console to reference the commerc +After your first connection is set up, you can add and manage additional connections for other billing entities from the **Manage Procurement Systems** page. Each connection uses its own set of credentials and can be scoped to different AWS Billing entities. To add a connection and manage the connections in your account, complete the following procedure. + +###### To add and manage additional Coupa connections + + 1. From [Manage Procurement Systems](https://aws.amazon.com/marketplace/eprocurement/overview), review your existing connections in the **Portal connections** table. Each row lists the connection's **Buyer ID** , **Supplier ID** , **Seller of Record** , **PunchOut status** , along with the **View** , **Enable** , and **Disable** actions. + + 2. Under **New Coupa connections** , enter the connection details – **Buyer ID** , **Shared secret** , **Supplier ID** , and optionally **Seller of Record (SOR)** to scope the connection to specific billing entities. + + 3. Submit the form to create the connection. The new connection appears in the **Portal connections** table. + + 4. On the new connection's row, choose **Enable** to activate AWS Marketplace PunchOut for that connection. + + 5. To stop routing PunchOut through a connection, choose **Disable** on its row. + +###### Note + +Disabling a connection is reversible. The connection remains in your account, and you can enable it again later. Disabling the last connection that has a redirect endpoint turns off direct punchout (redirect) for the account. + + 6. To see or edit a connection's details, choose **View** on its row. + +###### Note + +You can't edit a connection's **Seller of Record** or **Shared secret** from the AWS Marketplace procurement connections page. To update either field, use the [AWS Billing and Cost Management console](https://console.aws.amazon.com/costmanagement/home#/e-invoicing-preference/procurement-portal-preference/). + + + +