Request

With this release, the HTML editor on some administration pages has been upgraded. For example, the Company Info Administrator in Expense, Request and Invoice uses an HTML editor to edit the text that appears in the Company Notes section of the home page.

Be aware that existing HTML will not be affected, but going forward, unsupported HTML tags and attributes will no longer be accepted. Unsupported tags and attributes are most often found in content that is copied and pasted into the HTML editor from an external source, such as Microsoft Word.

User / Client Benefit: This change provides the admin an up-to-date HTML editor utilising today’s standards including HTML5. It also removes security vulnerability where a malicious user could inject dangerous code.

In the April 2017 release, Concur added the Ignore PNRs with Travel Request IDs feature. This month, we are clarifying the conditions of this feature with the following information:

Any PNRs that come into Concur from the Report Queue or from TBF (Travelport Booking Feed) will be ignored if they meet both of the following conditions:

• The PNR has a Request ID in Remarks
• The PNR does not exist in Concur

TMCs can create a PNR with a Request ID and let it flow to Concur normally without disrupting the approval process. Once the PNR is consumed from the Offline Approval Queue, Concur will accept future updates from the Report Queue or TBF.

Business Purpose / Client Benefit: This clarification provides more details about the feature.

Internet Browsers

In earlier release notes, we announced that the Users by Browser report would be removed in June.

The decision has been made to keep the report. A replacement may become available in the future. An announcement will be made in future release notes

Profile

Currently, a client can elect to configure their Concur site to comply with current accessibility standards. Soon, the accessibility feature will no longer be optional. The feature will be defaulted to ON for all Concur sites and it will not be available for change.

This process will take several months to complete. During this period, the accessibility setting that users see in Profile will be removed.

Planned Changes

Please note these dates:

- EU datacentre: Completed on Tuesday, 4 April 2017

- US datacentre: MOVED TO Wednesday, 12 July 2017

Concur announces an End of Support cycle for version 1.0 of the TLS encryption protocol, continuing support for the more secure 1.1 and 1.2 versions of TLS. As background, the TLS protocol allows secure back and forth communications between a phone or computer and a cloud-based service.

Note that, since less than 1% of Concur users are logging in to Concur Solutions using browsers or phones limited to version 1.0, a very small number of users are affected by this support discontinuation.

PLEASE NOTE NEW END DATE OF SUPPORT

We have moved the date in order to give our clients ample time to understand and make the required manual changes to their browser's security settings. These changes will be detailed in an upcoming service release.

Business Purpose / Client Benefit: Concur is taking this step after careful consideration of both the client’s security and ease of upgrade to the newer, more secure 1.1 and 1.2 versions of TLS. This end of life plan for TLS v 1.0 ensures our clients are communicating with Concur services in a safe and secure manner using TLS v. 1.1 and newer.

The Quick Tips section of the Concur Solutions home page (concursolutions.com) is targeted to be removed in the July service release.

Business Purpose / Client Benefit: This update simplifies the home page, making it easier to view and access the information on the page.

Support for Microsoft Internet Explorer (IE) version 10 browsers under Concur products will end on 18 August 2017. Concur strongly advises clients using IE v.10 to update to the latest IE browser version before that date, or to install and work with another supported browser.

Users still using IE v.10 will see a banner.

Client Notifications

The list of non-affiliated subprocessors is available here: Concur Non-Affiliated Subprocessors (English Only)

Monthly browser certifications, both current and planned, are available with the other Concur monthly release notes, accessible from What's New - Professional Edition