Concur Invoice Standard Edition Administration Help

June 2019 Expense Standard Edition Admin Summary

Initial Post

Release Note Summaries

The items in this section are summaries of the release notes for this month. The Standard Edition release notes are accessible from What's New - Standard Edition

Request

Concur Request Mobile Setting in Product Settings

The Concur Request mobile setting that was previously available to Concur Request administrators in Standard edition on the Site Settings page in Setup is now available in Product Settings on the Mobile Settings for Request page.

When this setting is enabled, users can create new requests using the SAP Concur mobile app.

The existing Request: Site Settings Setup Guide for Standard Edition is now renamed to the Request: Mobile Settings for Request Setup Guide for Standard Edition to coincide with the addition of the page to Product Settings.

Business Purpose / Client Benefit: The setting allows the administrator to control whether their Concur Request users can create new requests via the mobile app.

Cost Tracking Link Renamed to Custom Fields

The Cost Tracking link in the Capturing Spend section in Product Settings is now renamed to Custom Fields. The new link name now aligns with the name of the Manage Custom Fields page. The on-page text that displays under the Custom Fields link in the Capturing Spend section is now updated.

The existing Shared: Cost Tracking Setup Guide for Concur Standard Edition is now renamed to the Shared: Custom Fields Setup Guide for Concur Standard Edition to coincide with recent updates to this feature. In addition, the existing file name SG_Shr_Cost_Tracking.pdf is now renamed to SG_Shr_Custom_Fields.pdf.

Business Purpose / Client Benefit: This update improves custom field management by providing a better end user experience.

**Ongoing** Email Infrastructure Change - Add IP Addresses to Safe Sender List

SAP Concur is transitioning to a new email infrastructure for outbound email from our services to SAP Concur users. Because of this, companies who filter inbound email based on the sending IP address must add new IP addresses to their Safe Sender list to ensure that their users receive email from SAP Concur.

Initially, the issue described here affected only companies that use Concur Expense. Starting in January, email from other SAP Concur services (such as Travel and Concur Pay) will move to the new email infrastructure.

We will continue to add other services. Please monitor the release notes for more information about the timing of the additional changes.

SAP Concur Product Access Changes

With this release, customers must access SAP Concur products and services via the following domains:

  • *.concursolutions.com
  • *.concurcdc.cn

SAP Concur recommends clients migrate to one of the domains at their earliest convenience, if they are not already using one of them.

Please contact appsec@sap.com for any questions regarding this change.

Business Purpose / Client Benefit: This change will allow customers to access SAP Concur services in a consistent, secure manner.

Planned Change Summaries

The items in this section are summaries of the changes targeted for future releases. SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

Request

**Planned Changes** Authentication: Change in IP Restrictions

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

When a user signs in to SAP Concur, one of the validation processes includes checking for and adhering to any IP Restrictions (IPRs). IPRs are specific IPs or IP ranges that are defined by a company to restrict the IPs from which their users can sign in to SAP Concur. An IPR can be a string that contains a list of acceptable IP addresses and/or IP address patterns, for example: "170.242.6.43;170.243.70.42;170.243.70.43;171.159.*.*".

Currently, IPRs are set for each of a company's travel configurations, which creates maintenance issues for companies with many travel configurations and provides opportunities for errors. In addition, new travel configurations are not automatically included and can easily be forgotten.

Targeted for the August release, SAP Concur will change this setting from a configuration-level setting to a company-level setting. With the change, one set of IPRs will apply to the entire company.

Be aware that there are very few customers who will be affected by this change. In addition, all of the affected customers will be contacted individually – in advance – by SAP Concur to make any required settings changes.

Business Purpose / Client Benefit: Customers who use IPRs can be assured that the IPRs apply to the entire company.

**Planned Changes** Authentication: New SAP Concur Sign In Page

(Release note updated: 8 June)

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

In a future release, the SAP Concur Sign In page will be updated, providing a new login experience for both direct Concur username/password users and Single Sign-On (SSO) users. SSO users will be able to start the SP-initiated SSO login process at www.concursolutions.com.

The new Sign In page feature will include a two-step login process that will provide enhanced security, meet current industry standards and provide a better login success rate. This feature is planned for 2019.

Business Purpose / Client Benefit: This feature provides better security and a faster, convenient experience for users logging in to SAP Concur products and services.

**Planned Changes** Authentication: Single Sign-On (SSO) Self-Service Option Coming to SAP Concur (Q3 2019)

(Release note updated: 8 June)

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

Single Sign-On allows users to access multiple applications using one set of login credentials. Currently, SAP Concur has two methods for signing in: with a user name and password or using SSO with identity provider (IdP) credentials, such as a user's login credentials for their organisation.

SAP Concur is planning to add a Manage Single Sign-On (SSO) feature to SAP Concur products that provides clients with a self-service option for setting up SSO for their organisation. SSO is currently supported for Concur Expense, Invoice, Request and Travel.

The new Manage Single Sign-On (SSO) feature is a replacement tool for clients using existing SSO configuration and a new tool for clients that now want to implement SSO at their organisation. Existing SSO configuration and the new SSO Self-Service tool will both be available until everyone has migrated to the new SSO Self-Service tool.

Other SAP Concur products and services are outside the scope of this initial release.

This feature is targeted for Q3 2019.

Business Purpose / Client Benefit: This feature provides SAP Concur customers with a self-service option for setting up SSO and for existing SSO customers who must eventually migrate to the new SSO service to manage SSO for their users.

**Planned Changes** FTP Updates: Mandatory SFTP with SSH Key Authentication

Non-SFTP (Secure File Transfer Protocol) protocols and password authentication will eventually be deprecated.

NEW CUSTOMERS

New file transfer accounts must use SFTP with Secure Shell (SSH) Key Authentication.

EXISTING CUSTOMERS

Existing non-SFTP file transfer accounts need to switch to SFTP with SSH Key Authentication.

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

**Planned Changes** FTP Updates: Source IP Checking (EMEA)

SAP Concur will implement source Internet Protocol (IP) checking for all Europe, the Middle East and Africa (EMEA) file transfer accounts beginning on 15 July 2019.

NEW CUSTOMERS

The IP addresses for new customers will be added by SAP Concur during new customer implementation to the SAP Concur access control list (ACL).

EXISTING CUSTOMERS

Please contact SAP Concur support by 1 July 2019 to have your source IP addresses added to the SAP Concur access control list (ACL).

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

**Planned Changes** Updated Email Invitation for New Users

The email invitation that is sent to new users to log in to Standard Editions of Concur Expense, Invoice and Request will soon be updated. The email invitation is an optional feature that can be sent to new and existing users from the Users page in Product Settings.

The email invitation changes include the following benefits:

  • Improved link location so users can easily find the link to log in to SAP Concur products and change their password
  • Clarified text and formatting changes

This change will be available to new and existing clients.

Business Purpose / Client Benefit: This change will improve the usability of the email invitation for users by providing clear, concise instructions to log in and change the password when logging into the product for the first time.

**Planned Changes** User Export Allows Bulk Edit of Multiple Users

Client administrators will soon be able to export all existing users in SAP Concur to an Excel spreadsheet file, allowing admins to make bulk edits for multiple users. Once edits are made in the spreadsheet, the information can be uploaded into SAP Concur, populating user profiles with new data.

Previously, if client administrators needed to edit user profiles, the edit would need to be done individually for each user in their user profiles. This was a time-consuming process for admins.

The new user export feature will allow customer admins to:

  • Export a list of existing users and their profile attributes, including active and inactive users
  • Perform a bulk edit of user data, such as marking multiple users as inactive
  • Complete user profile information imported using QuickBooks Web Connector
  • Populate custom field information when new fields are created after the initial user import

Existing users will be placed into the existing spreadsheet template. The structure of the employee import spreadsheet template will remain the same, except that it will now also be used to export users. The spreadsheet will include all existing user attributes except for passwords and credit card and banking information. Up to a maximum of 1,000 users can be included in the export.

This change will be available to new and existing client administrators.

Business Purpose / Client Benefit: This feature allows client administrators to bulk edit multiple users and upload the data from the spreadsheet back into SAP Concur.

Client Notifications

The items in this section provide reference material for all clients.

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Monthly Browser Certifications

Monthly browser certifications, both current and planned, are available with the other SAP Concur monthly release notes, accessible from What's New - Standard Edition