Concur Invoice Standard Edition Administration Help

June 2018 Request Standard Edition Admin Summary

Update #1

Request

Change Log Now Logging When a Delegate is Assigned

When a user adds a delegate, the act of adding will leave an audit trail. The steps for adding a delegate are unchanged and this change includes delegates that are added using the user interface, a flat file import, or an Excel import. This change is only for adding delegates, not for removing them.

Business Purpose / Client Benefit: This change enhances audit capabilities.

End of Support for TLS 1.0 Email – Targeted for Wednesday, June 27, 2018

In 2017, SAP Concur announced that it would end support for version 1.0 of the TLS encryption protocol.

Be aware that – targeted for Wednesday, June 27, 2018 – SAP Concur will disable the ability to accept incoming email via TLS 1.0 connectivity for plans@concurtravel.com and plans@tripit.com.

There should be very little customer impact since the vast majority of customers have already disabled the ability to send email via the TLS 1.0 protocol.

**Reminder** New Cookie Consent Process

Europe has very specific user-consent requirements for cookies. There are two types of consent when allowing cookies to be saved on the user's computer. As described on the following pages, each country decides which option to use. The options are:

  • Active consent: The user actively agrees to allow cookies. In this case, SAP Concur is required to obtain user consent before saving any cookies on a user's computer.
  • Passive consent: The user does not disallow cookies.

Each country decides which option it wants to use.

Business Purpose / Client Benefit: These changes keep SAP Concur in compliance with global privacy requirements.

**Reminder** Whitelist for TrustArc.com

The May release notes included an item named New Cookie Preferences Link in the SAP Concur Footer. It describes cookie-related process changes that were introduced in the May 12 release because of specific consent regulations in Europe.

To ensure that SAP Concur properly responds to the regulations, SAP Concur has enlisted the assistance of TrustArc, a global privacy and data governance provider. Please ensure that your organization's IT (or similar) department adds TrustArc to its whitelist, so TrustArc can properly monitor and manage these processes.

TrustArc must be whitelisted by domain – not IP – since the IP is variable. Please whitelist these domains:

  • trustarc.com
  • prefmgr-cookie.truste-svc.net

Business Purpose / Client Benefit: Whitelisting ensures that TrustArc has the proper access to manage consent regulations on behalf of SAP Concur.

Planned Changes

The items in this section are targeted for future releases. Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

**Planned Changes** Concur Request APIs v4.0

Concur will soon be releasing Concur Request APIs v4.0. We are targeting to release v4.0 in July 2018.

With v4.0, Concur will be exposing new Request endpoints, providing the ability for a client and/or a partner to interact with Concur Request to do the following:

  • Get the detailed information about existing authorization requests
  • Read, create, delete or update an existing request
  • Move an existing authorization request through the approval flow with one of the following available actions: submit, approve, recall, cancel, close, or reopen
  • Get the list of expected expenses in a request
  • Read, create, delete, or update an expected expense for a request
  • Get information from a travel agency office

When Concur Request APIs v4.0 is released, additional information about v4.0 will be available in the Developer Platform Release Notes:https://developer.concur.com/tools-support/release-notes/index.html (English Only)

Background: SAP is continuing to invest heavily in APIs and tools to simplify end-to-end integration.

At SAP Concur, we strongly believe that an open ecosystem expands your view. An open ecosystem dynamically connects your internal systems, spend, and partner data to reveal powerful insights that empower you to run your business better.

Explore the capabilities listed in the Overview section and consider how the APIs could help you simplify some of your existing processes, such as:

  • Automatically creating a Concur Travel Request for any off-site training approved via your Human Resources system
  • Exposing authorization requests pending approvals onto your internal corporate portal “Manager” widget

We are also planning on adding additional API capabilities in a future release.

Permissions: In addition to the existing user-level permissions, the Concur Request APIs v4.0 will be managing the authorization for company-level permissions. This will allow our clients and/or partners to use a single token/permission to interact with Request on behalf of all company users.

Business Purpose / Client Benefit: These enhancements will provide more options for developers using Concur's Platform with Request.

**Planned Changes** Personalized Concur Open

Concur Open is the SAP Concur real-time service status dashboard, which displays outages and incidents for select SAP Concur services and all data centers. Concur Open displays the current service status as well as incident history for the past 20 days.

In a future release, there will be new functionality added to Concur Open. Users will continue to access Concur Open and view Concur service availability. However, in addition, SAP Concur users will be able to log in to Concur Open and:

  • View service status for the services and the data center specific to their company
  • Access subscription options for updates about the incidents that impact the services specific to their company
  • View service history for the past two years, including detailed root cause analysis information and the actions taken by SAP Concur for each incident

Business Purpose / Client Benefit: Customers use Concur Open to monitor their SAP Concur services outages, status, and availability. Adding this new functionality will provide customers a personalized view of their service status and availability. SAP Concur's goal is to provide a more accurate and transparent view of incidents/outages.

**Planned Changes** Processor Privacy Statement Link in Online Help – Targeted for July

The Processor Privacy Statement link is available in the SAP Concur footer.

However, not all pages in SAP Concur display the footer. In this case, the user can return to the Home page and click the Processor Privacy Statement link there.

Also – targeted for July – SAP Concur will add the Processor Privacy Statement link to online Help.

**Planned Changes** Support for Plain Text FTP to End on September 1st, 2018

SAP Concur announced the End of Support for plain text FTP to transfer data to and from SAP Concur.

Plain text FTP is not a secured protocol and has inherent security vulnerabilities. On September 1st, 2018, SAP Concur Operations will apply a security update to our File Transfer infrastructure, restricting the use of plain text FTP as a part of our ongoing commitment to securing our customers’ data and meeting the audited security requirements of the SAP Concur Trust Platform.

For more information, refer to thePlain Text FTP Retirement FAQ (English Only).

What This Means – The Client Experience: After September 1st, 2018, uploads of file types such as Employee, List, Attendee and other Import files as well as downloads of SAE and other Extract files that use Plain Text FTP will not be accepted via SAP Concur’s Filemover system. This will significantly impact client usage of SAP Concur products such as Concur Travel, Concur Expense, and Concur Invoice, as well as integration activities to customers’ financial systems. There will be no exceptions beyond September 1st, 2018.

Client Notifications

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Monthly Browser Certifications

Monthly browser certifications, both current and planned, are available with the other SAP Concur monthly release notes, accessible from What's New - Standard Edition