Administration

In order to support SAP Concur’s security best practices, legacy credit card feeds are no longer supported.

Reducing the number of supported mechanisms for exchanging data allows SAP Concur solutions to focus on providing better security and ease-of-use for our clients.

The legacy HR Feed Editor has been retired; feeds via the HR Feed Editor are no longer operable.

More secure and supported alternatives to import or update employee information in Concur Travel are available.

Reducing the number of supported mechanisms for exchanging data allows SAP Concur solutions to focus on providing better security and ease-of-use for our clients.

The Legacy Travel Assistant Feed has been retired; data feeds via the Travel Assistant Feed are no longer supported.

Reducing the number of supported mechanisms for exchanging data allows SAP Concur solutions to provide better security and improve ease-of-use for our customers.

Flight

Information regarding COVID-19-related reassurances provided by certain airlines is now displayed in Concur Travel. The information is available in the More Details section of the Benefits/Services link for each itinerary option. The following points provide additional details:

• This information is provided directly from the airline to Concur Travel. As such, each airline is responsible for accuracy and operational fulfilment.

• This information is curated by Concur Travel for airlines that represent the majority of booking volume on Concur Travel (currently AA, BA, DL, LH, LX, OS, SN, UA, with possibly a few more major airlines to be added).

• Reassurance information is subject to modification or withdrawal at any time.

• This information is displayed via the Benefits/Services link for each branded fare. Brand details are still available immediately below the COVID-19 reassurance response.

Because of the COVID-19 pandemic, Southwest Airlines has extended the validity of unused ticket credits multiple times. SAP follows these changes and ensures that travellers do not lose their ticket credits. Due to system limitations, these updates in Concur Travel will happen in multiple iterations and, in certain cases, the expiry date in Concur Travel may not reflect what was communicated by Southwest Airlines. However, the ticket credits affected will not expire and will be available to use until the extended expiry date.

The latest expiry date update occurred on 5 June 2020; all entries created before this date have the expiry date set to 7 September 2022. Manual unused ticket credit entries created after 5 June 2020 will not be updated before September 2020. Please make sure that the expiry date of any new entries is in accordance with the latest official communication of Southwest Airlines.

As part of our ongoing commitment to e-receipts and the effortless expense claim, air e-receipts generated by SAP Concur solutions, based on ticket and coupon data from GDS and some TripLink transactions, has a new look.

The new e-receipt format has been released throughout June/July 2020.

This change brings air e-receipts up to SAP Concur’s standard e-receipt format, providing users with a more consistent experience in SAP Concur products. This change also eliminates a performance issue for end users who would sometimes experience a delay in new air e-receipts delivery.

Hotel

With this release, Concur Travel now includes a Default sort option for web users and the ability for Custom Hotel Sourcing providers to override the Default option with a customised sort order.

Customers will have access to the new Default sort option in the Concur Travel online booking tool, which will align with the available sort options as currently supported in the Concur Travel mobile app.

Profile

Concur Travel now enforces the inclusion of the LastModifiedDate parameter in the Travel Profile 2.0 API, as documented. Users who omit the LastModifiedDate parameter will receive an error.

To return profile summaries for all of customers, users can set LastModifiedDate to 1900-01-01T12:00:00.

This feature ensures a consistent and improved experience for all users.

Starting with the July 2020 release, SAP Concur solutions will mask driving licence numbers in the user profile.

For those customers who have Driving Licence enabled in their user profile, those numbers show in clear text in the UI. This is inconsistent with other sensitive data, which is obfuscated, e.g. “****”. This change will bring driving licence numbers into a consistent behaviour with other sensitive data and improve security.

This change improves the security of sensitive data.

Miscellaneous

Support for the Director SAML service is being deprecated. Travel Management Companies (TMCs) and SAP Concur personnel will soon begin assisting customers who currently use Director SAML to migrate to SAP Concur SAML v2 SSO (SAML v2).

Clients currently using Director SAML are encouraged to migrate to SAML V2 as soon as possible.

This change provides better security and improved support for users logging in to SAP Concur products and services.

SAP Concur support for Hash-Based Message Authentication Code (HMAC) is being deprecated. Travel Management Companies (TMCs) and SAP Concur personnel are currently assisting customers who use HMAC to migrate to SAP Concur SAML v2 SSO (SAML v2).

In Q3 of 2020, SAP Concur plans to provide a self-service tool that will enable client admins to set up their SAML v2 connections without involving an SAP Concur support representative.

This change provides better security and improved support for users logging in to SAP Concur products and services.

This release note is intended for the technical staff responsible for file migrations with SAP Concur solutions. For our customers and suppliers participating in data exchange, SAP Concur solutions is maintaining our file transfer subsystem to provide greater security for those file transfers.

SAP Concur solutions will begin migrating entities that currently use a legacy process for moving files to a more efficient and secure file routing process that relies on APIs.

These changes provide greater security and efficiency for file transfers.

The certificate provided by the SAP Concur SAMLv2 service, which is used to establish a Single-Sign On (SSO) connection with an IdP, expired on 25 June 2020. A new certificate is available for renewal. Users might be prevented from successfully signing into SAP Concur products if the expired certificate is not renewed.

To ensure that the SSO certificate adheres to the latest security standards and processes, the certificate is configured to expire and be renewed periodically.

On 22 June 2020, SAP Concur solutions removed support for connections to *.concursolutions.com and *api.concursolutions.com that use the following TLSv1.2 ciphers:

• AES256-GCM-SHA384

• AES128-GCM-SHA256

In response to the needs of our clients, support for these ciphers was restored on 25 June.

Profile

Currently, when using the Travel Profile 2.0 API to retrieve a user’s Travel Arranger, both active and inactive Arrangers are returned for that user. With this change, the Travel Profile 2.0 API will return only active Travel Arrangers.

By returning only the minimum amount of data required to arrange travel SAP Concur solutions can reduce the amount of data exposed online.