3820604 - How do I obtain a refresh token OAuth 2.0 for my Client Web Services integration?

I am setting up a Client Web Services (CWS) integration that authenticates at the company level, without a specific end user. I need a concrete, actionable sequence rather than a link to the developer documentation. Specifically, I want to know how to actually get a company-level OAuth 2.0 refresh token and then use it on an ongoing basis: which screens to open in SAP Concur, what role I need, which endpoint and parameters to call for the token exchange, what to store, and how to renew the access token when it expires. I also want to understand which host to call for the exchange versus the ongoing calls, and what the common refresh errors mean.

Guidance for a Client Web Services (CWS) integration that needs to authenticate at the company level rather than as a specific end user. Answers how to obtain and maintain a company-level OAuth 2.0 refresh token for ongoing authenticated API access. , KBA , CON-INT , Integrations , Problem