Concur Invoice

Concur Invoice users can now add the Payment Due Date field to all list views on the My Invoices and Unassigned Invoices pages that have column preferences functionality.

To access the feature, users click on the gear icon which opens the Manage Columns window.

Users can then drag and drop the Payment Due Date field between the Hidden and the Visible lists depending on what they want to see in the list views.

Business Purpose / Client Benefit: This enhancement makes it easier for clients to see when the payment is due, which makes their payment planning easier.

The Supplier Portal feature will soon be retired, and suppliers will no longer be able to use this functionality. The Supplier Portal enables suppliers to perform self-serve tasks without needing to interact with their buyer (Concur Invoice client), such as checking the status of an invoice, searching for their buyers and viewing the buyer contact information if direct contact is required.

With the retirement of the Supplier Portal, suppliers who sign into the Supplier Portal will receive a message about the retirement. Clients who try to send the invitation link out to suppliers will also receive a message about the retirement. Clients who are using the Supplier Portal are encouraged to reach out to any suppliers who are actively using it with alternate instructions on how to interact with their buyers.

As Concur Invoice moves forward, we are committed to identifying the best solution to deliver on our clients' business needs.

Business Purpose / Client Benefit: This feature is being retired due to low usage.

Authentication

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

Support for the Director SAML service is being deprecated. Travel Management Companies (TMCs) and SAP Concur personnel will soon begin assisting clients who currently use Director SAML to migrate to SAP Concur SAML v2 SSO (SAML v2).

Clients currently using Director SAML are encouraged to migrate to SAML V2 as soon as possible.

Deprecation of support for the Director SAML service is dependent on the following requirements:

• SAP Concur technicians and TMCs assist existing SAP Concur clients to migrate from the Director SAML service to SAML V2.

• All clients that currently rely on the Director SAML service have migrated from Director SAML to SAML V2.

Migration from Director SAML to SAML V2 requires the following general steps:

• The client identifies an admin to act as the SSO admin and assigns the proper permission/role.

• The SSO admin coordinates with their SAP Concur technician to obtain the SAP Concur SP metadata.

• The SSO admin configures the SSO settings at the IdP based on information from SP metadata.

• The SSO admin retrieves IdP metadata from the IdP and delivers the metadata to the SAP Concur technician.

• The SSO admin adds a few testing users and tests the new SSO connection.

• With successful testing, the company rolls out SSO to their SAP Concur users.

For more detailed information about migrating to SAML v2, refer to the SSO Service: Overview Guide (English Only) and the Shared: SSO Management Setup Guide (English Only).

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur support for Hash-Based Message Authentication Code (HMAC) is being deprecated. Travel Management Companies (TMCs) and SAP Concur personnel are currently assisting clients who use HMAC to migrate to SAP Concur SAML v2 SSO (SAML v2).

In November of 2020, SAP Concur plans to provide a self-service tool that will enable client admins to set up their SAML v2 connections without involving an SAP Concur support representative.

The HMAC deprecation includes two phases:

PHASE I:

• Clients must have an identity provider (IdP) or a custom SAML 2.0 compliant solution.

• Clients begin testing authentication using SAML v2.

• TMCs prepare to onboard new SAP Concur clients to SAML v2.

• Once the SSO self-service tool is available, clients will be notified of the official deprecation date of HMAC via release notes. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded to SAML v2.

• Existing clients using HMAC must migrate to SAML v2.

PHASE II:

• TMCs have migrated all existing SAP Concur clients from the HMAC service to SAML v2.

• The HMAC service is deprecated. Phase II is targeted to end mid-year in 2021.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

File Transfer Updates

This release note is intended for technical staff responsible for file transmissions with SAP Concur solutions. For our customers and suppliers participating in data exchange through various secure file transfer protocols, we are making changes that provide greater security for those file transfers.

On 13 October, 2020, support for the following SSH transfer ciphers was removed for file transfers:

• 3des-cbc

• blowfish-cbc

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

• st-eu.concursolutions.com

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

This Release Note is intended for the technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange, SAP Concur is maintaining our file transfer subsystem to provide greater security for those file transfers.

SAP Concur will begin migrating entities that currently use a legacy process for moving files to a more efficient and secure file routing process that relies on APIs.

Clients whose entities are currently configured to use the legacy process will be migrated to the more efficient process sometime between now and the end of 2020. After they are migrated to the more efficient process, clients will see the following improvement:

• With the legacy process, clients had to wait for the file move schedule to run at a specified time. With the more efficient and secure API-based process, extracts and other outbound files from SAP Concur will be available within the existing overnight processing period shortly after the files are created.

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

Business Purpose / Client Benefit: These changes provide greater security and efficiency for file transfers.

Concur Invoice

In a future release, clients will be able to export data by clicking the Download as Excel link in the All Sent to Purchasing list view on the My Invoices page:

There is no maximum number of items that can be exported, but the export process might take some time if there are many items to be exported.

Business Purpose / Client Benefit: This feature provides clients with flexibility in how they work with invoice data.