Authentication

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

Single Sign-On allows users to access multiple applications using one set of login credentials. Currently, SAP Concur has two methods for signing in: with a user name and password or using SSO with Identity Provider (IdP) credentials, such as a user's login credentials for their organisation.

This feature provides SAP Concur customers with a self-service option for setting up SSO and for existing SSO customers who must eventually migrate to the new SSO service to manage SSO for their users.

File Transfer Updates

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

These changes provide greater security for file transfers.

Miscellaneous

This feature/change has been targeted for release. For information about this feature/change, refer to the applicable product release notes (entitled "Modified Home Page Appears When Some Products and Services Are Unavailable (Late March)").

SAP Concur is updating the Imaging XML API to clarify two error codes. The service currently returns an HTTP 200 code even when the API returns an error 500 in the XML response. This update corrects the HTTP error code, returning HTTP 500 if the API response includes the 500 error code. Additionally, the Imaging response error code 503 (Storage Unavailable) will be changed to error code 122, to reduce confusion with the HTTP 503 error code.

This update supports better monitoring of the Imaging XML API.

In an effort to ensure the ongoing security of our products and services, SAP Concur will be issuing a new concursolutions.com SSL certificate. The certificate availability date will be provided in a future release note.

Any customer who has pinned this expiring certificate will need to update to the new certificate prior to the expiration date. If the pinned certificate is not updated prior to this, your organisation and users will experience disruption to SAP Concur products and services.

This update provides ongoing security for our products and services.