November 2020 Shared Planned Changes Professional Edition Admin Summary

Initial Post

Planned Change Summaries

The items in this section apply to multiple SAP Concur products and/or services and are summaries of the changes targeted for future releases.

SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

Authentication

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

RELEASE: Single Sign-On (SSO) Self-Service Option (Products: Expense, Invoice, Request, Travel)

This feature/change has been targeted for release. For information about this feature/change, refer to the applicable product release notes.

**Planned Changes** Android / iPhone / iPad – Retirement of Mobile PIN (Products: Expense, Invoice, Request, Travel and Mobile)

Targeted for the November (9.86) Mobile release, SAP Concur solutions plans to retire the Mobile PIN sign-in option in the SAP Concur mobile app.

This change coincides with the redesign of the mobile sign-in page which will also be implemented with the November release.

Beginning with the November release, users will be able to switch back to the old sign-in page design and will be able to use the Mobile PIN sign-in option on that page. The option to switch between the old and new page designs will no longer be available beginning with the March (9.89) release.

**Planned Changes** Android / iPhone / iPad – Retirement of Auto Sign-In Setting (Products: Expense, Invoice, Request, Travel and Mobile)

Targeted for the November (9.86) Mobile release, SAP Concur solutions plans to retire the automatic sign-in setting in the SAP Concur mobile app. This change coincides with the redesign of the mobile sign-in page which will also be implemented with the November release.

The retirement of this feature better supports secure authentication by removing the less secure automatic sign-in setting.

Admin

**Planned Changes** Connected List Data Type Now Available for Expense Attendee Form (Products: Expense, Invoice, Request)

Custom fields that are connected lists can now be added to the Expense Attendee forms in Forms and Fields (Administration > Expense > Expense Admin > Forms and Fields). The Expense Attendee forms are used to configure the attendee forms for Concur Expense, Concur Request and Concur Invoice.

This update enhances the attendee functionality to allow connected list type custom fields.

Authorised Support Contacts

**Planned Changes** Security / Data Protection Contact Option To Be Added to SAP Concur Support Portal Profile (Products: Expense, Invoice, Request, Travel)

In early December 2020, SAP Concur plans to add an option to the SAP Concur Support Portal that will enable Authorised Support Contacts (ASCs) to designate whether they should be contacted regarding a security or data protection topic.

This enhancement gives clients more control over who in their company is contacted regarding security or data protection topics, and provides greater control over which notifications an ASC receives.

File Transfer Updates

**Planned Changes** Mandatory SFTP with SSH Key Authentication (Products: Expense, Invoice, Request, Travel, Intelligence)

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our customers and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

These changes provide greater security for file transfers.

Non-SFTP (Secure File Transfer Protocol) protocols and SFTP password authentication will no longer be allowed to connect to SAP Concur products as of 7 December, 2020:

Existing non-SFTP file transfer accounts need to switch to SFTP with SSH Key Authentication before 7 December, 2020.
SFTP password reset requests require the client to provide an SSH key for authentication.
Existing SFTP file transfer accounts that use password authentication must switch to use SSH key authentication before 7 December, 2020.

Miscellaneous

**Planned Changes** Updated Naming Convention for Sub-URLs (Products: Expense, Invoice, Request, Travel)

As part of our overall cloud platform strategy, SAP is planning to implement a more consistent naming convention for the URLs used to connect to SAP Concur solutions, based on data centre. Users will continue to be able to access www.concursolution.com and will be routed automatically to the correct URL or single sign-on (SSO) as part of their sign-in process.

This change supports future URL consistency across all global regions, and a central URL that redirects users to the appropriate data centre.

Security

RELEASE: End of Support for Insecure Protocols and Ciphers in F5 Client SSL Profiles for VIPs (Products: Expense, Invoice, Request and Travel)

This feature/change has been targeted for release. For information about this feature/change, refer to the applicable product release notes.

Client Notifications

The items in this section provide reference material for all clients.

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Monthly Browser Certifications

Monthly browser certifications, both current and planned, are available with the other SAP Concur monthly release notes, accessible from What's New - Professional Edition