Skip to main content

CMiC Authentication

Agave connects to CMiC through its REST APIs, acting as a registered CMiC user. This guide covers the connection details Agave needs and the API access to grant that user.

This guide is for your CMiC administrator. You only need it once, when Expense Management and/or AP Automation are first connected.

This guide covers:

  • The connection details Agave needs
  • Whitelisting Agave's static IP addresses for on-premise CMiC
  • The CMiC API endpoints Agave uses

Before you start​

API access in CMiC is licensed separately. If your company has not enabled it, contact your CMiC Customer Success Manager for a quote before starting.

Expense Management

Expense Management uses the same CMiC user as your other Agave products. You do not need to create a second one, but it does need more API access than the other products do. See Additional endpoints for Expense Management below.

Step 1: Gather your connection details​

Agave needs the following:

FieldWhere it comes from
ServerYour CMiC URL up to and including .com. For https://testrti.cmiccloudr12.com/cmictestrti/, this is https://testrti.cmiccloudr12.com
EnvironmentThe text after .com in your CMiC URL. For the example above, this is cmictestrti
Client IDThe client registered in CMiC cloud. Not required for on-premise CMiC
UsernameA registered CMiC user
PasswordThe password for that user

Step 2: Whitelist Agave's static IP addresses​

This step applies to on-premise CMiC only. Skip it if your CMiC instance is cloud hosted.

Ask your IT team to whitelist Agave's three static IP addresses so Agave can reach the CMiC database on your network:

  1. 13.58.14.240
  2. 18.219.160.98
  3. 3.143.37.24

These are the same three addresses used by every other Agave connection, so if you already run Agave against an on-premise system, they are already whitelisted.

note

If you are unable to authenticate even after adding the above static IP addresses, contact support@useagave.com.

CMiC API endpoints Agave uses​

ApplicationEndpointAPI DescriptionInsertUpdateDeleteQuery
AP-REST-APIapallvouchersAll Vouchers (Query only)NNNY
AP-REST-APIapvendorVendorsYYYY
AP-REST-APIapvoucherSC RFP Based VouchersYNNY
AP-REST-APIscrfpdetailSubcontract Request for Payment DetailsNNNY
AR-REST-APIarcustomerCustomersYYYY
AR-REST-APIarinvoiceInvoicesYYYY
CM-REST-APIcmdetailPCI DetailsYYYY
CM-REST-APIcmmastPCI MastersYYYY
CM-REST-APIcmstatusPCI Status CodeYYNY
CM-REST-APIcmownerchangeorderOwner Change OrdersYYNY
CM-REST-APIcmtypePCI TypesYYYY
GL-REST-APIglcompanyCompaniesNNNY
JC-REST-APIjcmastercategoriesMaster CategoriesNNNY
JC-REST-APIjcjobcostcodesJob Phases/Cost CodesNNNY
JC-REST-APIjcjobcategoryJob CategoriesYYYY
JC-REST-APIjcjobJobsYYNY
JC-REST-APIjcmastercostcodesMaster Phases/Cost CodesYYNY
PM-REST-APIpmprojcontactProject ContactsNNNY
PM-REST-APIpmprojectProjectsYYNY
PM-REST-APIpmprojpartnerProject PartnersYYNY
PM-REST-APIscmastSubcontract HeadersYYNY
PM-REST-APIscschedSubcontract DetailsYYNY
SYS-REST-APItermPayment TermsYYYY
SYS-REST-APIweightmeasureWeight MeasuresYYNY
SYS-REST-APIsdobjusrextvalueUser Extension FieldsYYNY

Additional endpoints for Expense Management​

Expense Management writes each expense as an AP voucher, posts it, and later pays it off with a manual check. That flow needs endpoints beyond the table above.

ApplicationEndpointUsed for
AP-REST-APIapvouchernoscCreating the voucher that represents the expense
AP-REST-APIpostvouchersPosting the voucher batch once it is created
AP-REST-APImanualcheckCreating the manual check that pays off posted vouchers
AP-REST-APImanualcheck/batchCreating several checks in a single batch
GL-REST-APIglaccountsGL accounts, including the account behind each card
ECM-REST-APIuploadDoc/uploadUploading the receipt image
ECM-REST-APIImgSourcesReading your Image Source ID
ECM-REST-APIImgSourceDocTypeVReading your Document Type ID
warning

Expense Management posts vouchers and creates manual checks, which the other Agave products do not do. If you are adding Expense Management to an existing CMiC connection, confirm the user has permission for both. Voucher entry alone is not enough.