Concur Invoice

Custom fields that are connected lists can now be added to the Expense Attendee forms in Forms and Fields (Administration > Invoice > Forms and Fields). The Expense Attendee forms are used to configure the attendee forms in Concur Expense, Concur Request and Concur Invoice.

Business Purpose / Client Benefit: This update provides the ability to capture, search and import attendee information from connected list fields on attendee forms.

File Transfer Updates

This feature is no longer targeted for October 2019 and is not targeted for the current release. This Release Note has been moved to the Shared Planned Changes Release Notes (English only).

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

SAP Concur will change the IP address for st-eu.concursolutions.com from 84.14.175.233 to 46.243.56.11 on 23 November, 2019 during the maintenance window in the region Europe, the Middle East and Africa (EMEA).

Clients whose file transfers protocols use the SAP Concur DNS endpoint (st-eu.concursolutions.com) to connect are not impacted by this change.

Clients who connect via IP address will need to connect to the SAP Concur DNS endpoint (st-eu.concursolutions.com) or the new IP address as of 23 November, 2019.

SAP Concur recommends connecting to DNS endpoint st-eu.concursolutions.com to avoid connection issues if the SAP Concur IP address changes.

This announcement pertains to the following file transfer DNS endpoint:

• st-eu.concursolutions.com

Business Purpose / Client Benefit: This change provides greater security for file transfers.

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur made changes that provide greater security for those file transfers.

As of 8 AM PDT, 14 October, 2019, SAP Concur no longer supports the following unsecure SSH protocol algorithms/ciphers:

• (key exchange) diffie-hellman-group-exchange-sha1

• (encryption) aes128-cbc

• (encryption) aes192-cbc

• (encryption) aes256-cbc

• (message authentication code) hmac-md5

• (message authentication code) hmac-sha1-96

• (message authentication code) hmac-md5-96

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

• st-eu.concursolutions.com

• st-cge.concursolutions.com

• st-cge-dr.concursolutions.com

• vs.concursolutions.com

• vs.concurcdc.cn

If assistance is required, please contact SAP Concur support.

For more information, refer to the Shared: File Transfer for Customers and Vendors User Guide (English Only).

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

Authentication

This feature is no longer targeted for October 2019 and is not targeted for the current release. This Release Note has been moved to the Shared Planned Changes Release Notes (English only).

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur now has a new Sign In page, providing a new login experience for both direct SAP Concur username/password users and Single Sign-On (SSO) users. SSO users will start the SP-initiated SSO login process at www.concursolutions.com. This change was made on 31 October, 2019 (not in the scheduled monthly release). Initially, the new Sign In page is visible to only a small percentage of users. Availability will gradually increase throughout November 2019, until all SAP Concur users have the option to use the new Sign In page.

The new SAP Concur Sign In page features a two-step login process that provides enhanced security, meets current industry standards and provides a better login success rate.

Business Purpose / Client Benefit: This feature provides better security and a faster, convenient experience for users logging in to SAP Concur products and services.

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur will soon begin the deprecation process of removing Hash-Based Message Authentication Code (HMAC) as an SSO option. The replacement service for HMAC is SAML SSO, a self-service method of setup where client admins have access within SAP Concur to complete their SAML connections.

Clients currently using HMAC are encouraged to migrate to the SSO self-service tool as soon as it is released (targeted for Q1 2020). The new SSO self-service tool allows multiple portals (Identity Providers) to be added.

The HMAC deprecation includes two phases:

PHASE I:

• Clients need to have an Identity Provider (IdP) or a custom SAML 2.0 solution.

• Clients begin testing the new SSO self-service tool.

• Clients prepare for onboarding new clients using the new SSO self-service tool, which is targeted for release in Q1 2020.

• Once the SSO tool is available, clients will be notified via release notes about the official deprecation date of HMAC. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded using the new SSO self-service tool.

• Existing clients using HMAC must be migrated using the new SSO self-service tool.

PHASE II:

• Clients continue migrating existing HMAC clients to the new SSO self-service tool.

• Shut down the HMAC service after everyone has migrated from HMAC to the new SSO self-service tool. Phase II is targeted to end mid-year 2020.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

Concur Invoice

In a future release, the AP User will be able to manage columns they want to display on the Unassigned Invoices list pages.

Business Purpose / Client Benefit: This enhancement helps client customise the view they need to better manage their invoice information.

Invoice Pay

In a future release, checks generated by Invoice Pay will provide security enhancements based on the latest industry standards.

Clients will be able to order sample checks by creating a Salesforce ticket and then processing and verifying the checks with their bank.

Business Purpose / Client Benefit: This enhancement will provide more security when clients process checks.

Purchase Order

In a future release, users with the Purchase Order Processor role will have the ability to reopen closed purchase orders.

Business Purpose / Client Benefit: This change enables the Purchase Order Processor to reopen a purchase order that has been incorrectly closed so that it can be processed correctly.

In a future release, users with the Purchase Order Processor role will have the ability to change the owner of a purchase order.

Business Purpose / Client Benefit: If a purchase order owner is no longer an active SAP Concur user or is no longer responsible for new invoices associated with a purchase order, this feature enables the Purchase Order Processor to change the owner of the purchase order so that purchase order invoices can be routed to a new owner.