Concur Invoice Standard Edition Administration Help

August 2019 Request Standard Edition Admin Summary

Initial Post

Release Note Summaries

The items in this section are summaries of the release notes for this month. The Standard Edition release notes are accessible from What's New - Standard Edition

Request

File Transfer Updates: Support Ending for Unsecured SSH Protocol Algorithms/Ciphers

SAP Concur will no longer support the following unsecured SSH protocol algorithms/ciphers:

  • (key exchange) diffie-hellman-group-exchange-sha1
  • (encryption) aes128-cbc
  • (encryption) aes192-cbc
  • (encryption) aes256-cbc
  • (message authentication code) hmac-md5
  • (message authentication code) hmac-sha1-96
  • (message authentication code) hmac-md5-96

This announcement pertains to the following file transfer DNS endpoints:

  • st.concursolutions.com
  • st-eu.concursolutions.com
  • st-cge.concursolutions.com
  • st-cge-dr.concursolutions.com
  • vs.concurcdc.cn

If assistance is required, please contact SAP Concur support.

For more information, refer to the Shared: File Transfer for Customers and Vendors User Guide (English Only). (This guide is located with the other Expense, Invoice and/or Request setup and user guides.)

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

Introducing Screen Sharing for Authorised Support Contacts

SAP Concur support is implementing the Co-browse feature, a screen-share application that is available to all Authorised Support Contacts (ASCs).

Business Purpose / Client Benefit: Screen sharing often makes a problem easier to describe, easier to understand and quicker to resolve – saving time for ASCs and SAP Concur support.

**Ongoing** Authentication: Deprecation of HMAC Initiates Migration to SSO Self-Service

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur will soon begin the deprecation process of removing Hash-Based Message Authentication Code (HMAC) as an SSO option. The replacement service for HMAC is SAML SSO, which will be a self-service method of setup whereby Company Admins will have access within SAP Concur to complete their SAML connections.

Clients currently using HMAC are encouraged to migrate to the SSO self-service tool as soon as it is released. The new SSO self-service tool will be offered as a free feature to all clients. The new SSO self-service tool allows multiple portals (Identity Providers) to be added.

The HMAC deprecation includes two phases:

Phase I:

  • Clients need to have an Identity Provider (IdP) or a custom SAML 2.0 solution.
  • Clients begin testing the new SSO self-service tool. Testing can begin as soon as July 2019 if preparation steps have been met.
  • Clients prepare for onboarding new clients using the new SSO self-service tool, which is targeted to release in September 2019.
  • As of 1 November 2019, no new clients will be onboarded using HMAC. New clients will be onboarded using the new SSO self-service tool.
  • Existing clients using HMAC need to be migrated using the new SSO self-service tool.

Phase II:

  • Clients continue migrating existing HMAC clients to the new SSO self-service tool.
  • Shut down the HMAC service after everyone has migrated from HMAC to the new SSO self-service tool. Phase II is targeted to end mid-year 2020.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

**Ongoing** Email Infrastructure Change - Add IP Addresses to Safe Sender List

SAP Concur is transitioning to a new email infrastructure for outbound email from our services to SAP Concur users. Because of this, companies who filter inbound email based on the sending IP address must add new IP addresses to their Safe Sender list to ensure that their users receive email from SAP Concur.

Initially, the issue described here affected only companies that use Concur Expense. Starting in January, email from other SAP Concur services (such as Travel and Concur Pay) will move to the new email infrastructure.

We will continue to add other services. Please monitor the release notes for more information about the timing of the additional changes.

Updates for Concur Open and Personalised Concur Open

Over the next several weeks, users will see several enhancements to Concur Open and Personalised Concur Open.

User Export Allows Bulk Edit of Multiple Users

Client administrators are now able to export all existing users in SAP Concur to an Excel spreadsheet file, allowing admins to make bulk edits for multiple users. Once edits are made in the spreadsheet, the information can be uploaded into SAP Concur, populating user profiles with new data.

Previously, if client administrators needed to edit user profiles, the edit would need to be done individually for each user in their user profiles. This was a time-consuming process for admins.

The new user export feature allows client admins to:

  • Export a list of existing active users and their profile attributes
  • Perform a bulk edit of user data, such as marking multiple users as inactive
  • Complete user profile information imported using QuickBooks Web Connector
  • Populate custom field information when new fields are created after the initial user import

Existing users are downloaded into the existing spreadsheet template. The structure of the employee import spreadsheet template remains the same, except that it is now also used to export users. The spreadsheet includes all existing user attributes except for passwords and credit card and banking information. Up to a maximum of 1,000 users can be included in the export.

This change is available to new and existing clients.

Business Purpose / Client Benefit: This feature allows client administrators to bulk edit multiple users and upload the data from the spreadsheet back into SAP Concur.

Release Notes

Shared Planned Changes Release Notes Consolidated

With this release, SAP Concur will consolidate the shared Planned Changes release notes into one document, instead of having the Planned Changes information repeated in several sets of release notes.

This consolidated Planned Change information is provided in addition to the product-specific Planned Changes release notes. For example, if a planned change applies only to Travel, it will only be available in the Travel release notes. So, users are encouraged to read the product-specific release notes as well as the Shared Planned Changes.

Business Purpose / Client Benefit: This change allows users to find shared Planned Changes release notes in one place. It also makes it easier for clients to keep track of updates to the Planned Changes release notes.

Planned Change Summaries

The items in this section are summaries of the changes targeted for future releases. SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

No Request-Specific Planned Changes This Month

Client Notifications

The items in this section provide reference material for all clients.

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Monthly Browser Certifications

Monthly browser certifications, both current and planned, are available with the other SAP Concur monthly release notes, accessible from What's New - Standard Edition