Concur Invoice Standard Edition Administration Help

September 2021 Invoice Standard Edition Admin Summary

Initial Post

Release Note Summaries

The items in this section are summaries of the release notes for this month. The Standard Edition release notes are accessible from What's New - Standard Edition

Payment Manager

Pagination Added to Check Configuration List Page

With the September release, SAP Concur will add pagination to the Check Configuration List page in Invoice Payment Manager. A maximum of 25 check configurations are displayed on each page.

Business Purpose / Client Benefit: This change improves page performance when a large number of check configurations are listed.

Authentication

Support for HMAC Now Deprecated

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur support for Hash-Based Message Authentication Code (HMAC) has been deprecated.

SAP Concur provides a Single Sign-On self-service option that enables client admins to setup their SAML v2 connections without involving an SAP Concur support representative.

For more information about the Single Sign-On self-service option, refer to the Shared: Single Sign-On Overview (English Only) and the Shared: Single Sign-On Setup Guide (English Only).

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

New Company Request Token self-service tool

A new Company Request Token self-service tool is now available to SAP Concur admins who have been assigned the Company Admin or Web Services Admin role.

The Company Request Token self-service tool enables clients to generate the Company Request Token that is required to request a JSON web token (JWT) when connecting to APIs in the SAP Concur platform.

Business Purpose / Client Benefit: The Company Request Token self-service tool enables clients to generate Company Request Tokens without contacting SAP Concur support. This tool also enables clients to generate a replacement Company Request Token without assistance from SAP Concur support if their Company Request Token expires or is lost.

Client Web Services

Register Partner Application Page No Longer Active

On August 21, the Register Partner Application page was deactivated.

With the October release, a new application management self-service tool will replace the Register Partner Application page.

For more information, refer to the **Planned Changes ** Self-Service Tool for Application Management note in the September Final Shared Planned Changes release notes (English Only).

Prior to the release of the new self-service tool, clients with SAP Concur Client Web Services can contact Client Web Services to register new applications.

Clients who do not have SAP Concur Client Web Services can still contact SAP Concur support to obtain an App ID as needed.

Business Purpose / Client Benefit: The Register Partner Application page was used to create Oauth 1.0 (legacy) applications. Oauth 1.0 was deprecated on February 4, 2017.

For more information about the deprecation of Oauth 1.0 and migration to Oauth 2.0,efer to the SAP Concur Developer Portal.

The new self-service tool for application management will enable clients to create Oauth 2.0 compliant applications.

Concur Mobile App

Android / iPhone / iPad – Concur Mobile Registration Page Update

In late September, the Concur Mobile Registration page will be updated. To navigate to the updated Concur Mobile Registration page, click Profile > Profile Settings > Concur Mobile Registration. The updated Concur Mobile Registration page includes three new sections:

  • Mobile Sign-In Policies

  • Sign-In IDs

  • Download the App

Business Purpose / Client Benefit: The Concur Mobile Registration page update provides users with more information on their sign-in IDs and their organization's mobile sign-in policies.

Custom Fields

Existing List items Included in Downloaded List Import Template

Beginning with the September release, when an administrator downloads the list import template file from the Custom Fields > Manage List Items > Edit List page in Product Settings, if the list has 1,000 or fewer list items, those list items are included in the downloaded file and they can be updated via the import template when the file is uploaded.

Prior to this change existing list items were not included in the downloaded list import template.

Business Purpose / Client Benefit: This change enhances the functionality of the list import template.

File Transfer Updates

**Ongoing** Mandatory SFTP with SSH Key Authentication

This release note is intended for technical staff responsible for file transmissions with SAP Concur products. For SAP Concur clients and vendors participating in data exchange through various secure file transfer protocols, SAP is making changes that provide greater security for those file transfers.

As of April 10, 2021, non-SFTP (Secure File Transfer Protocol) protocols and SFTP password authentication are not allowed to connect to SAP Concur for file transfers:

  • Non-SFTP file transfer accounts must switch to SFTP with SSH Key Authentication.

  • SFTP file transfer accounts that use password authentication must switch to SSH key authentication.

  • SFTP password reset requests require the client to provide an SSH key for authentication.

On April 12, 2021, SAP started disabling non-compliant file transfer connections. The process of disabling non-compliant accounts will continue throughout 2021. If you have multiple file transfer connections configured, this change applies to all of your file transfer connections.

This announcement pertains to the following file transfer DNS endpoints:

  • st.concursolutions.com

  • st-eu.concursolutions.com

  • vs.concursolutions.com

  • vs.concurcdc.cn

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

Rotating PGP Key Available for File Transfers

Files transferred to SAP Concur products must be encrypted with the SAP Concur public PGP key, concursolutionsrotate.asc.

concursolutionsrotate.asc

  • Key file is available in client’s root folder

  • Key ID 40AC5D35

  • RSA 4096-bit signing and encryption subkey

  • Key expires every 2 years

  • Client is responsible for replacing the key before it expires

    • Next expiry date: September 4, 2022

    • SAP Concur plans to replace the current rotating public PGP key in the client’s root folder 90 days before the expiration date

The SAP Concur legacy PGP key (key ID D4D727C0) remains supported for existing clients but will be deprecated in the future.

SAP Concur strongly recommends that clients use the more secure rotating public PGP key for file transfers. To facilitate the use of the more secure rotating public PGP key for file transfers, SAP Concur added the key to existing client’s home folders on Friday, January 15, 2021.

This announcement pertains to the following file transfer DNS endpoints:

  • st.concursolutions.com

  • mft-us.concursolutions.com

  • vs.concursolutions.com

  • st-eu.concursolutions.com

  • mft-eu.concursolutions.com

Business Purpose / Client Benefit: The rotating public PGP key provides greater security for file transfers.

**Ongoing** SAP Concur Legacy File Move Migration

This release note is intended for the technical staff responsible for file transmissions with SAP Concur. For our clients and vendors participating in data exchange, SAP Concur is maintaining our file transfer subsystem to provide greater security for those file transfers.

SAP Concur is in the process of migrating entities that currently use a legacy process for moving files to a more efficient and secure file routing process that relies on APIs.

Clients whose entities are currently configured to use the legacy process will be migrated to the more efficient process sometime between now and January 24, 2022. After they are migrated to the more efficient process, clients will see the following improvement:

  • With the legacy process, clients had to wait for the file move schedule to run at a specified time. With the more efficient and secure API-based process, extracts and other outbound files from SAP Concur will be available within the existing overnight processing period shortly after the files are created.

This announcement pertains to the following file transfer DNS endpoints:

  • st.concursolutions.com

Business Purpose / Client Benefit: These changes provide greater security and efficiency for file transfers.

Localization

Updated Translation for Attendee Term (Traditional Chinese)

With the September release, SAP Concur plans to change the following terms in the Traditional Chinese version of the SAP Concur user interface to bring consistency to the translation of Attendee(s):

English Term

Current Traditional Chinese Term

Updated Traditional Chinese Term

Attendee

出席者

參與者

Attendees

出席者

參與者

Business Purpose / Client Benefit: These revisions provide a more accurate translation and improved user experience.

Product Settings

Product Settings Page Design Changes

With the September release, the design of the Product Settings page in Concur Standard Edition is updated.

Business Purpose / Client Benefit: This update improves the usability of the Product Settings page and prepares the Product Settings page for future enhancements.

Planned Change Summaries

The items in this section are summaries of the changes targeted for future releases. SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

IMPORTANT: These Planned Changes might not list all of the upcoming enhancements and modifications that affect this SAP Concur product or service. The Planned Changes that apply to multiple SAP Concur products and/or services are listed in a consolidated document. Please review the additional Planned Changes admin summaries available in the September 2021 Shared Planned Changes Standard Edition Admin Summary.

Invoice Pay

**Planned Changes** Processing Invoice Provider ACH Payments

SAP Concur has been pursuing a multi-year effort to transition our portfolio of payment solutions to partner-enabled solutions. This is evidenced by our robust partner options for Concur Invoice payments.

As part of this announcement, SAP Concur plans to release Invoice Provider ACH, a new feature that will enable clients to directly manage vendor ACH payments in Payment Manager. With this solution, clients can manage delivery of funds and remittance information, as well as tracking returns and failed payments, with minimal impact on vendors.

For the client, the experience will not change, only Bambora will be the payment provider executing the ACH payments from the client’s bank account to the vendor’s bank account. They will continue to work with Payment Manager to perform the same tasks, now using the new Invoice Provider ACH funding accounts they have set up for this purpose.

Business Purpose / Client Benefit: This change is part of a transition to partner-enabled solutions to support future product enhancements and richer integration.

**Planned Changes** Invoice Pay ACH Decommission

SAP Concur has been pursuing a multi-year effort to transition our portfolio of payment solutions to partner-enabled solutions. This is evidenced by our robust partner options for Concur Invoice payments.

At this time, SAP Concur is accelerating the decommissioning of the Invoice Pay ACH feature of Concur Invoice as of January 1, 2022. As we move into the next phase of our pay strategy via partner solutions, this decommission will require clients using Invoice Pay ACH to enable alternative solutions as payments will not be made to vendors starting on November 15, 2021.

Business Purpose / Client Benefit: This change is part of a transition to partner-enabled solutions to support future product enhancements and richer integration.

Purchase Order

**Planned Changes** Purchase Order Transmission Limit on Email Attachments

In a future release, SAP Concur plans to implement a limit on the size of the file attachments (images) that can be transmitted with a purchase order (PO). When this change is implemented, POs with attachments that exceed the limit will remain in a Pending Transmission status and users will receive a notification that the PO cannot be transmitted due to the size of the attachment. Users can remove the attached files and reupload images that meet the requirement to retransmit the PO.

Business Purpose / Client Benefit: This change helps to ensure that the Concur Invoice email service supports PO transmission in all environments.

Client Notifications

The items in this section provide reference material for all clients.

Accessibility Updates

SAP implements changes to better meet current Web Content Accessibility Guidelines (WCAG). Information about accessibility-related changes made to SAP Concur solutions is published on a quarterly basis. You can review the quarterly updates on the Accessibility Updates (English Only) page.

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Supported Browsers

Supported Browsers are available with the other SAP Concur monthly release notes, accessible from What's New - Standard Edition