> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a Navan connector

> C1 provides identity governance for Navan. Integrate your Navan instance with C1 for unified visibility and governance over user access.

C1 provides identity governance for Navan. Integrate your Navan instance with
C1 for unified visibility and governance over who has access in Navan, which
department and cost center each person belongs to, and what role they hold.

## Capabilities

| Resource     | Sync                                                          | Provision |
| ------------ | ------------------------------------------------------------- | --------- |
| Users        | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Departments  | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Cost centers | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

Users carry their Navan role (Traveler, Travel arranger, or Admin) as a grant
on the Navan instance. Departments and cost centers are synced as groups, and
each user is granted membership in the department and cost center recorded on
their profile.

## Gather Navan credentials

<Warning>
  You need administrator access to the Navan admin console to create API
  credentials.
</Warning>

<Steps>
  <Step>
    Sign in to the Navan admin console and open the API / integrations area.
  </Step>

  <Step>
    Create an OAuth2 client-credentials application with read access to users
    (the `users:read` scope).
  </Step>

  <Step>
    Copy the generated **Client ID** and **Client Secret**. The client secret
    is shown only once, so store it securely.
  </Step>
</Steps>

## Configure the Navan connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Navan** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new Navan connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the Navan credentials:

        * **Navan Client ID**: the Client ID from the Navan admin console.
        * **Navan Client Secret**: the Client Secret from the Navan admin console.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your Navan connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the Navan connector in your own
    environment.

    <Steps>
      <Step>
        Create secrets for the Navan Client ID and Client Secret.
      </Step>

      <Step>
        Configure the connector environment variables:

        * **BATON\_NAVAN\_CLIENT\_ID**: the Navan Client ID.
        * **BATON\_NAVAN\_CLIENT\_SECRET**: the Navan Client Secret.
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your Navan connector is now pulling access data into C1.
  </Tab>
</Tabs>