Concur Invoice

AP users can manage and customise columns from the Unassigned Invoices list pages. To access the feature, AP users click on the gear icon to access the Manage Columns window.

Then they can drag and drop fields between the Hidden and the Visible lists depending on what they want to see on the Unassigned Invoices page.

Some of the fields cannot be removed (hidden). A warning message appears to notify the AP user.

In addition, an In-Product Message (IPM) with information about this feature will appear the first time AP users log in to the Unassigned Invoices page.

Business Purpose / Client Benefit: This enhancement helps clients to customise the view they need to better manage their invoice information.

In a future release, clients who import historical invoices will have the Client payment method set as default.

Business Purpose / Client Benefit: This enhancement helps clients to customise the view they need to better manage their invoice information.

File Transfer Updates

This release note is intended for technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur is making changes that provide greater security for those file transfers.

SAP Concur changed the IP address for st-eu.concursolutions.com from 84.14.175.233 to 46.243.56.11 on 23 November 2019.

Clients whose file transfers protocols use the SAP Concur DNS endpoint (st-eu.concursolutions.com) to connect are not impacted by this change.

Clients who connect via IP address must connect to the SAP Concur DNS endpoint (st-eu.concursolutions.com) or the new IP address.

SAP Concur recommends connecting to DNS endpoint st-eu.concursolutions.com to avoid connection issues if the SAP Concur IP address changes again in the future.

This announcement pertains to the following file transfer DNS endpoint:

• st-eu.concursolutions.com

Business Purpose / Client Benefit: This change provides greater security for file transfers.

Authentication

SAP Concur will soon begin the deprecation process of removing Hash-Based Message Authentication Code (HMAC) as an SSO option. The replacement service for HMAC is SAML SSO, a self-service method of setup where client admins have access within SAP Concur to complete their SAML connections.

Clients currently using HMAC are encouraged to migrate to the SSO self-service tool as soon as it is released (targeted for Q1 2020). The new SSO self-service tool allows multiple portals (Identity Providers) to be added.

The HMAC deprecation includes two phases:

PHASE I:

• Clients need to have an Identity Provider (IdP) or a custom SAML 2.0 solution.

• Clients begin testing the new SSO self-service tool.

• Clients prepare for onboarding new clients using the new SSO self-service tool, which is targeted for release in Q1 2020.

• Once the SSO tool is available, clients will be notified via release notes about the official deprecation date of HMAC. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded using the new SSO self-service tool.

• Existing clients using HMAC must be migrated using the new SSO self-service tool.

PHASE II:

• Clients continue migrating existing HMAC clients to the new SSO self-service tool.

• Shut down the HMAC service after everyone has migrated from HMAC to the new SSO self-service tool. Phase II is targeted to end mid-year 2020.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

Miscellaneous

Targeted for 19 December, several changes will be made to Concur Open and Personalised Concur Open.

• Subscription Services: Email and RSS subscriptions for service status notifications will be available only through Personalised Concur Open, which displays the service issues specific to a customer's organisation. Current Concur Open subscriptions for SAP Concur customers will be migrated to Personalised Concur Open.

• Notification Email From Address: The notification email address will be updated from openupdates@concur.com to ConcurOpenUpdates@sap.com. Customers should ensure that they have added the @sap.com domain to their Safe Sender List and that users have updated any personal email inbox rules.

• Root Cause Analysis (RCA) Reports: After each incident, a preliminary RCA report will be published, followed by a final RCA report that contains a more complete analysis with corrective actions. Both reports will be published only in Personalised Concur Open.

• Service Availability Status: To better reflect customer impact, the Performance Issue icon and Partial Performance Issue icon will be removed from Concur Open and Personalised Concur Open.

Business Purpose / Client Benefit: These changes provide better information for customers while also removing some of the information that is currently available to non-customers.

Previously, delegates/proxies/assistants/arrangers who acted on behalf of others and who also had any of several administrative roles/permissions could pause their act-as session while they completed admin tasks. This feature was a benefit for the admin who might be testing configuration changes or simply who must multi-task.

Due to internal security changes, the feature has been retired.

Business Purpose / Client Benefit: Retiring this feature closes a potential security gap.