Concur Invoice Professional Edition Administration Help

February 2020 Invoice Professional Edition Admin Summary

Initial Post

Release Note Summaries

The items in this section are summaries of the release notes for this month. The Professional Edition release notes are accessible from What's New - Professional Edition.

Concur Invoice

Connected List Data Type Now Available for Expense Attendee Form - Retracted

In the November 2019 release notes, the Connected List Data Type Now Available for Expense Attendee Form release note was accidentally published before the official release of this new functionality, which is currently targeted for a future release.

The Connected List data type functionality is part of the planned future direction of the product that is currently on our longer-range roadmap. More information will be published about this functionality when the entire feature is ready to be officially released.

This connected list functionality will not be universally supported for attendee records, and will only be available for very specific use cases for employee attendees (SYSEMP).

Invoice Capture

Submit/Get Next and Submit/Quit Options Added to Concur Managed Verification

The Invoice Capture Concur Managed Verification page now includes Submit/Get Next and Submit/Quit options.

Business Purpose / Client Benefit: These options make the verification more efficient for Invoice Capture Processors.

Authentication

**Ongoing** Deprecation of HMAC Initiates Migration to SSO Self-Service

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur will soon begin the deprecation process of removing Hash-Based Message Authentication Code (HMAC) as an SSO option. The replacement service for HMAC is SAML SSO, a self-service method of setup where client admins have access within SAP Concur to complete their SAML connections.

Clients currently using HMAC are encouraged to migrate to the SSO self-service tool as soon as it is released (targeted for Q1 2020). The new SSO self-service tool allows multiple portals (Identity Providers) to be added.

The HMAC deprecation includes two phases:

PHASE I:

  • Clients need to have an Identity Provider (IdP) or a custom SAML 2.0 solution.

  • Clients begin testing the new SSO self-service tool.

  • Clients prepare for onboarding new clients using the new SSO self-service tool, which is targeted for release in Q1 2020.

  • Once the SSO tool is available, clients will be notified via release notes about the official deprecation date of HMAC. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded using the new SSO self-service tool.

  • Existing clients using HMAC must be migrated using the new SSO self-service tool.

PHASE II:

  • Clients continue migrating existing HMAC clients to the new SSO self-service tool.

  • Shut down the HMAC service after everyone has migrated from HMAC to the new SSO self-service tool. Phase II is targeted to end mid-year 2020.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

Security Enhancements

Support Ending for TLS v 1.1 Encryption Protocol (20 Feb, 2020)

SAP Concur is announcing end-of-support for version 1.1 of the Transport Layer Security (TLS) encryption protocol. The more secure version 1.2 of TLS continues to be supported. As background, the TLS protocol allows secure back and forth communications between a phone or computer and a cloud-based service.

Refusal of TLS v.1.1 connections will commence on 20 February, 2020.

Business Purpose / Client Benefit: SAP Concur is taking this step after careful consideration of our clients’ security and the ease of upgrade to the newer, more secure version 1.2 of TLS. This end-of-support plan for TLS v 1.1 ensures that our clients are communicating with SAP Concur solutions in a safer and more secure manner using TLS v 1.2.

Graphics No Longer Supported for Printed Invoices (31 Jan 2020)

Currently, clients can use the Printed Invoice feature to configure and customise their own invoices that are emailed, displayed online or printed. Clients can also add graphics (for example, logos).

Targeted for 31 January 2020 – in order to meet security requirements – SAP Concur will no longer support graphics of any sort in invoices that are configured using the Printed Invoice feature.

Business Purpose / Client Benefit: This change provides greater security for SAP Concur clients.

File Transfer Updates

TLS v1.1 SSL Protocol Not Allowed for File Transfers (10 Feb, 2020)

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

Beginning 10 February, 2020 at 8 AM PST, the TLS 1.1 (Transport Layer Security) SSL protocol will be removed from our SAP Concur file transfer system allowed list.

  • This relates to the FTPS and HTTPS file transfer protocols.

  • The HTTPS file transfer protocol will not be allowed, starting 24 February, 2020. If you are currently using HTTPS, we suggest migrating to SFTP with key authentication before 10 February, 2020.

    For more information, refer to the HTTPS Protocol No Longer Allowed for File Transfer (24 Feb, 2020) release note in this document.

This announcement pertains to the following file transfer DNS endpoints:

  • st.concursolutions.com

  • st-eu.concursolutions.com

  • st-cge.concursolutions.com

  • st-cge-dr.concursolutions.com

  • vs.concursolutions.com

  • vs.concurcdc.cn

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

HTTPS Protocol No Longer Allowed For File Transfer (24 Feb, 2020)

This Release Note is intended for the technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

Beginning 24 February, 2020 at 2 PM PST, connections via the HTTPS protocol will no longer be allowed when connecting to the SAP Concur file transfer system.

  • Existing HTTPS file transfer accounts must switch to SFTP with SSH Key Authentication before 24 February, 2020.

This announcement pertains to the following file transfer DNS endpoints:

  • st.concursolutions.com

  • st-eu.concursolutions.com

  • st-cge.concursolutions.com

  • st-cge-dr.concursolutions.com

  • vs.concursolutions.com

  • vs.concurcdc.cn

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

Planned Change Summaries

The items in this section are summaries of the changes targeted for future releases. SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

IMPORTANT: These Planned Changes might not list all of the upcoming enhancements and modifications that affect this SAP Concur product or service. The Planned Changes that apply to multiple SAP Concur products and/or services are listed in a consolidated document. Please review the additional Planned Changes admin summaries available in the February 2020 Shared Planned Changes Professional Edition Admin Summary.

Concur Invoice

**Planned Changes** Invoice Users Who Can Create Invoices Will Soon Be Able to Customise Columns for the Unsubmitted Invoices List View

Concur Invoice users who can create invoices will soon be able to manage and customise columns from the Unsubmitted Invoices and Unsubmitted Purchase Order Invoices list views on the My Invoices page. To access the feature, invoice users click on the gear icon, which opens the Manage Columns window.

They can then drag and drop fields between the Hidden and the Visible lists, depending on what they want to see in the Unsubmitted Invoices and Unsubmitted Purchase Order Invoices list views.

Some of the fields cannot be removed (hidden). A warning message appears to notify the invoice user when they try to remove (hide) such a field.

In addition, an In-Product Message (IPM) with information about this feature will appear the first time an invoice user accesses the Unsubmitted Invoices list view.

Business Purpose / Client Benefit: This enhancement helps clients to customise the view they need to better manage their invoice information.

Invoice Pay

**Planned Changes** Security Enhancements for Checks

In a future release, checks generated by Invoice Pay will provide security enhancements based on the latest industry standards.

Clients will be able to order sample checks by creating a Salesforce ticket and then processing and verifying the checks with their bank.

Business Purpose / Client Benefit: This enhancement will provide more security when clients process checks.

Purchase Order

**Planned Changes** Invoice Users Who Can Create Invoices Will Soon Be Able to Customise Columns for the Unsubmitted Invoices List View

In a future release, users with the Purchase Order Processor role will have the ability to reopen closed purchase orders.

Business Purpose / Client Benefit: This change enables the Purchase Order Processor to reopen a purchase order that has been incorrectly closed so that it can be processed correctly.

**Planned Changes** Purchase Orders Can be Assigned to a New Owner

In a future release, users with the Purchase Order Processor role will be able to change the owner of a purchase order (PO). The new owner will see the POs that are assigned to them on the My Purchase Orders page.

In order to assign a PO to a new owner the following criteria must be met:

  • The PO must be an SAP Concur-generated PO (imported POs cannot be reassigned using this feature).

  • The new owner must have an active SAP Concur user account.

  • The new owner must have the Purchase Request User role assigned to them.

  • The new owner must have access to the policy and supplier associated with the relevant PO.

To support Change Order functionality, new PO owners will also be assigned as the owner of the purchase request the PO was created from. If more than one PO was created from a single purchase request, assigning a new PO owner to one PO will also assign them as the owner of the other POs associated to the same purchase request.

Business Purpose / Client Benefit: If a PO owner is no longer an active SAP Concur user or is no longer responsible for new invoices associated with a PO, the Purchase Order Processor will be able to change the owner of the PO so that PO invoices can be routed to a new owner.

Client Notifications

The items in this section provide reference material for all clients.

SAP Concur Non-Affiliated Subprocessors

The list of non-affiliated subprocessors is available here: SAP Concur list of Subprocessors (English Only)

Monthly Browser Certifications

Monthly browser certifications, both current and planned, are available with the other SAP Concur monthly release notes, accessible from What's New - Professional Edition