Concur Invoice

There is no maximum number of items that can be exported, but the export process might take some time if there are many items to be exported.

Business Purpose / Client Benefit: This feature provides clients with flexibility in how they work with invoice data.

Data Retention

As of 2 June 2020, when user data is removed in accordance with a data retention policy, the country code associated with removed users is obfuscated by setting the country code to XX (Inactive).

Previously, the country code for removed users was set to US by default.

Business Purpose / Client Benefit: This improves reporting by consistently setting the country code data for removed users to a code designated for that purpose.

Language Support

With the May release (16 May), SAP added support for the following language:

• Thai

Business Purpose / Client Benefit: This change enables users to configure Thai as the default language for the UI text in SAP Concur solutions. Selecting Thai as the default language might also change some regional settings.

Authentication

These changes are part of the SAP continued commitment to maintaining secure authentication.

SAP will soon begin the deprecation process of removing Hash-Based Message Authentication Code (HMAC) as an SSO option. The replacement service for HMAC is SAML SSO, a self-service method of setup whereby client admins have access within SAP to complete their SAML connections.

Clients currently using HMAC are encouraged to migrate to the SSO self-service tool as soon as it is released (targeted for Q2 2020). The new SSO self-service tool allows multiple portals (Identity Providers) to be added.

The HMAC deprecation includes two phases:

PHASE I:

• Clients must have an Identity Provider (IdP) or a custom SAML 2.0 solution.

• Clients begin testing the new SSO self-service tool.

• Travel Management Companies (TMCs) partners prepare for onboarding new SAP Concur clients using the new SSO self-service tool, which is targeted for release in Q2 2020.

• Once the SSO tool is available, clients will be notified via release notes about the official deprecation date of HMAC. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded using the new SSO self-service tool.

• Existing clients using HMAC need to be migrated using the new SSO self-service tool.

PHASE II:

• Travel Management Companies (TMCs) partners continue migrating existing SAP Concur clients from the HMAC service to the new SSO self-service tool.

• Shut down the HMAC service after everyone has migrated from HMAC to the new SSO self-service tool. Phase II is targeted to end mid-year 2020.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

File Transfer Updates

This release note is intended for the technical staff responsible for file transmissions with SAP. For our clients and suppliers participating in data exchange, SAP is maintaining our file transfer subsystem to provide greater security for those file transfers.

SAP will begin migrating entities that currently use a legacy process for moving files to a more efficient and secure file routing process that relies on APIs.

Clients whose entities are currently configured to use the legacy process will be migrated to the more efficient process sometime between now and the end of 2020. After they are migrated to the more efficient process, clients will see the following improvement:

• With the legacy process, clients had to wait for the file move schedule to run at a specified time. With the more efficient and secure API-based process, extracts and other outbound files from SAP will be available within the existing overnight processing period shortly after the files are created.

• st.concursolutions.com

Business Purpose / Client Benefit: These changes provide greater security and efficiency for file transfers.

Miscellaneous

The certificate provided by the SAP Concur SAMLv2 service, which is used to establish a Single-Sign On (SSO) connection with an IdP, will expire on 25 June, 2020. Unless the certificate is renewed before the 25 June 2020 expiration date, the certificate expiration might prevent users from being able to successfully sign in to SAP Concur products.

SAP Concur solutions offer SSO to help make the user sign-in process easier and more secure. SSO requires that trust be established between the Identity Provider (IdP) and the Service Provider (SP). This trust is established in part by cryptographic use of certificates provided by the service provider, in this case, SAP Concur solutions.

Business Purpose / Client Benefit: To ensure that the SSO certificate adheres to the latest security standards and processes, the certificate is configured to expire and be renewed periodically.

On 22 June 2020, SAP Concur solutions removed support for connections to *.concursolutions.com and *api.concursolutions.com that use the following TLSv1.2 ciphers:

• AES256-GCM-SHA384

• AES128-GCM-SHA256

In response to the needs of our clients, support for these ciphers was restored on 25 June.

Beginning in May, users can connect to the US Data Centre through www.concursolutions.com or through a new URL, us1.concursolutions.com. In addition, targeted for Q3, users connecting to the US Data Centre through www.concursolutions.com will be redirected to us1.concursolutions.com.

Business Purpose / Client Benefit: The us1.concursolutions.com URL is consistent with the URL for other data centres. For example, users connecting to the EMEA data centre are redirected to eu1.concursolutions.com.

Concur Invoice

In a future release and based on role and setting, clients who have performed an import by using the Import Now feature will receive an email notification with information about the success of the import.

Business Purpose / Client Benefit: This enhancement helps clients keep track of successful Import Now email notifications.