Authentication

Single Sign-On allows users to access multiple applications using one set of login credentials. Currently, SAP Concur has two methods for signing in: with a user name and password or using SSO with Identity Provider (IdP) credentials, such as a user's login credentials for their organisation.

SAP Concur is planning to add a Manage Single Sign-On (SSO) feature to SAP Concur products that provides clients with a self-service option for setting up SSO for their organisation. SSO is currently supported for Concur Expense, Invoice, Request and Travel.

Budget Insight

Budget Insight is a budget management tool that is being retired on 31 December 2019. Clients who want to use budget functionality are recommended to implement the new Budget product that SAP Concur released last year. The new Budget feature offers greater functionality, an improved UI and additional integrations with SAP Concur products. Most notably is the inclusion of additional spend data from Concur Invoice and Purchase Request, in addition to Concur Expense and Concur Request (previously only data from Concur Expense and Concur Request was available).

File Transfer Updates

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

SAP Concur will change the IP address for st-eu.concursolutions.com from 84.14.175.233 to 46.243.56.11 on 23 November, 2019.

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

Non-SFTP (Secure File Transfer Protocol) protocols and SFTP password authentication will no longer be allowed to connect to SAP Concur products as of 7 December, 2020.

This feature/change, previously targeted for 21 October, 2019, release is now targeted for a release date to be determined. This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

SAP Concur will implement source Internet Protocol (IP) checking for all European, Middle Eastern and African (EMEA) file transfer accounts.

This Release Note is intended for the technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

Beginning 24 February, 2020 at 8 AM PST, connections via the HTTPS protocol will no longer be allowed when connecting to the SAP Concur file transfer system.

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

Beginning 10 February, 2020 at 8 AM PST, the TLS 1.1 (Transport Layer Security) SSL protocol will be removed from our SAP Concur file transfer system allowed list.

Financial Integration (Standard Edition Only)

This feature/change has been targeted for release. For information about this feature/change, refer to the applicable product release notes.

Miscellaneous

SAP Concur is announcing an end-of-support cycle for version 1.1 of the Transport Layer Security (TLS) encryption protocol, while continuing support for the more secure version 1.2 of TLS. As background, the TLS protocol allows secure back and forth communications between a phone or computer and a cloud-based service.

This change is currently planned for the first quarter of 2020.

Currently, delegates/proxies/assistants/arrangers who act on behalf of others and who also have any of several administrative roles/permissions can pause their act-as session while they complete admin tasks. This feature is a benefit for the admin who might be testing configuration changes or simply has to multi-task.

Due to internal security changes, we are deprecating this feature.

Currently, if a user attempts to sign in to an SAP Concur service and the service is not available, a message appears stating that the entire site is down.

In fact, some services may be available. If services are available, an abbreviated service access page appears for the user, allowing the user to access those services.

SAP Concur is updating the Imaging XML API to correct an error message HTTP code. The service currently returns an HTTP 200 code even when the API returns an error 500 in the XML response. This update corrects the HTTP error code, returning HTTP 500 if the API response includes the 500 error code. No other response codes in XML or HTTP will be changed.

The Imaging XML API is separate from the Imaging v1.0 or v3.0 APIs, and very few clients are using it. SAP Concur will reach out individually to those clients in order to coordinate this change.

After a user selects a different language from the Change language dropdown and then signs in with their credentials to SAP Concur, a page appears prompting them to confirm which language to use as it applies to the current session (for example, their latest selection or what is specified as default in their profile), or whether they want to use the latest selected language for the current session and also update the default language in their profile to that selection.

Removal of this page removes the recurrence of preferred language issues and simplifies the user experience.

Currently, customers can use the Printed Report (or Printed Invoice) feature to configure and customise their own expense claims, invoices and requests that are emailed, displayed online or printed. Customers can also add graphics (generally logos).

This change provides greater security for SAP Concur customers.

Clients that use or plan to use SAP Concur callouts (for example, Send Notification, Launch External URL, Fetch List and Fetch Attendee) need to ensure they meet the SAP Concur security standards. To reduce security risk for our clients and SAP Concur, we are giving companies until the end of 2019 to make the required update for callouts. If clients have security protocols below our standard after 31 December, 2019, their callouts will stop working in January 2020.

This will reduce security risk for the clients that use callouts and SAP Concur.

Product Settings (Standard Edition Only)

The Manage Custom Fields module in Product Settings will continue to have user interface (UI) updates. The planned UI updates will change the look and feel of some existing features or settings. Some small, new feature enhancements may also be added, but these features will be relatively minor. No existing features or functionality will be removed. Some changes will be targeted to align with upcoming releases while other, smaller changes will occur without notice.

These updates improve custom field management by providing a better end user experience.