Concur Invoice Standard Edition Administration Help

February 2019 Request Standard Edition Admin Summary

Initial Post

Release Notes

This topic contains the admin summaries of the release notes for the Concur Request functionality for the Standard Edition.

Request

New SSL Certificate for concursolutions.com

In an effort to ensure the ongoing security of our products and services, SAP Concur has issued a new concursolutions.com SSL certificate. The current certificate will expire on 16 March 2019.

Any customer who has pinned this expiring certificate will need to update to the new certificate prior to 16 March 2019. If the pinned certificate is not updated prior to 16 March 2019, your organisation and users will experience disruption to SAP Concur products and services.

Customers who have not pinned the certificate do not need to take any action as the new certificate is updated automatically. Most customers do not pin the certificate.

Please be aware: As an enhancement to our Security and Compliance programme, this certificate will be updated on an annual basis.

Business Purpose / Client Benefit: This update provides ongoing security for our products and services.

**Ongoing** Email Infrastructure Change - Add IP Addresses to Safe Sender List

SAP Concur is transitioning to a new email infrastructure for outbound email from our services to SAP Concur users. Because of this, companies who filter inbound email based on the sending IP address must add new IP addresses to their Safe Sender list to ensure that their users receive email from SAP Concur.

Initially, the issue described here affected only companies that use Concur Expense. Starting in January, email from other SAP Concur services (such as Travel and Concur Pay) will move to the new email infrastructure.

We will continue to add other services throughout the first quarter of 2019. Please monitor the release notes for more information about the timing of the additional changes.

**Ongoing** Updated Email Format

SAP Concur has provided a release note about the updated email notifications for several months. Be aware that we will discontinue this release note in two months.

IMPORTANT

Note the following:

  • Be aware that the email content has not changed – just the look and feel has been updated.
  • The changes will appear over time. Each product team (Expense, Invoice, Travel, etc.) decides when to use the new format. Timing will be based on resource availability and the priority of other scheduled enhancements.
  • Do not expect that all product emails will change at the same time. For example, perhaps Expense approval email will be first, and then other Expense notifications will follow.
  • There is no assigned end date to the project. Expect that the changes may take longer than a year.
Reminder: No Personal or Sensitive Data in Custom Fields

All companies must take all reasonable steps to protect the personal and sensitive information of their employees. As per recommended security-related best practices, remember that custom fields should not contain personal and sensitive data.

NEXT STEPS

If your company is currently using custom fields to store personal or sensitive data (for example, Social Security numbers, family member names or any other personally identifying information), you should plan to remove this information from your existing fields within the service and modify your current configuration.

For additional information, refer to the FAQ (English Only).

SAP Concur Support Portal

Security Questions Available When Using the SAP Concur Support Portal

Prior to 2017, Authorised Support Contacts (ASCs) using the SAP Concur support portal were required to answer security questions prior to interacting with support. This feature was retired while it was being redesigned.

As of 3 January, the feature is again available.

Business Purpose / Client Benefit: Customers appreciate this feature because it provides another layer of security – it prevents someone from impersonating:

  • An ASC and then requesting an improper or unexpected configuration change

    – or –

  • An end user and then accessing their confidential data

Planned Changes

The items in this section are targeted for future releases. SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

Request

**Planned Changes** New SAP Concur Sign In Page

SAP Concur is planning to add a new Sign In page, providing an updated login experience for users who log in with a user name and password credentials. Current Single Sign-On (SSO) users will log in without having to enter additional credentials. This feature is planned for 2019.

The new Sign In page feature includes the following:

  • Two-step login: provides enhanced security, meets current industry standards and provides a better login success rate
  • Multi-account login: allows administrators to log in with multiple accounts
  • Password hint removal: provides better security for users and SAP Concur
  • User avatar: enhances the user experience (planned for a future release)

Business Purpose / Client Benefit: This feature provides better security and a faster, convenient experience for users logging in to SAP Concur products and services.

**Planned Changes** Single Sign-On (SSO) Self-Service Option Coming to Concur

Single Sign-On allows users to access multiple applications using one set of login credentials. Currently, SAP Concur has two methods for signing in: with a user name and password or using SSO with identity provider (IdP) credentials, such as a user's login credentials for their organisation.

SAP Concur is planning to add a Manage Single Sign-On (SSO) feature to Concur that provides Concur clients with a self-service option for setting up SSO for their organisation. SSO is currently supported for Concur Expense, Invoice, Request and Travel.

The new Manage Single Sign-On (SSO) feature will be accessible from the Access To Concur section of Product Settings.

  • Single Sign-On can be managed for Standard Travel if it is bundled with Expense, Invoice and/or Request.
  • For standalone Standard Travel, the Manage Single Sign-On feature will be accessible from the Travel Settings page.

Other SAP Concur products and services are outside the scope of this initial release.

Business Purpose / Client Benefit: This feature provides Concur clients with a self-service option for setting up SSO.

General

**Planned Changes** Archive Deactivated User Data

This information will no longer appear in the release notes.

For more information about deactivated users, refer to the General Information: Archiving Deactivated User Data Fact Sheet.

Client Notifications

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Monthly Browser Certifications

Monthly browser certifications, both current and planned, are available with the other SAP Concur monthly release notes, accessible from What's New - Standard Edition