Concur Invoice

In the April release, SAP Concur replaced instances of the term "payment request" and its iterations with the term "invoice" and its iterations. These changes were made for the end user in the user interface, the Concur Invoice documentation and in all other SAP Concur product documentation where it appears.

Starting in the May release, this term change will occur over time for the admin users.

The following terms will also change names:

• Request ID -> Invoice ID

• Payment Request -> Invoice

• Request Name -> Invoice Name

• Payment Request Type -> Policy

Business Purpose / Client Benefit: This change helps to ensure that the terminology used in SAP Concur is consistent with industry standard terminology.

Column Headers are now "anchored" on the My Invoices and Unassigned Invoices pages for better visibility as they scroll through invoices. This means that clients can scroll to the end of a page with many invoices and still see the column headings.

Business Purpose / Client Benefit: This enhancement makes it easier for clients to view the information they need in their daily work.

Purchase Request

Clients can enter comments at the header and line item levels in a purchase request (PR). Beginning in this release, when a user with the Purchase Request Approver, User or Processor role views purchase request details, an icon is displayed if comments have been added to the PR.

Business Purpose / Client Benefit: This change makes purchase request processing more efficient and ensures that the Purchase Request Approver, User and Processor are alerted to the presence of comments.

A View Details link has been added to Purchase Request. The View Details link enables Purchase Request Users, Approvers and Processors to view more detailed information about the supplier assigned to a purchase request (PR) line item.

Business Purpose / Client Benefit: This change provides greater visibility into the details of the purchase request.

Authentication

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

User passwords can no longer be reset or updated through the User Import and Employee Import features. You can still set the password for new users during the initial import through the User Import and Employee import features.

USER IMPORT

The password field is still available in the downloadable Excel template, but is only read during the initial import of the file, or when creating a new user in the system. Subsequent uses of the field are ignored by the system.

For general information about this functionality, refer to the Shared: User Import User Guide.

EMPLOYEE IMPORT

The password fields are still available in the 100, 300, 305, and 310 record sets, but they are only read during the initial import of the file, or when creating a new user in the system. Subsequent uses of the fields are ignored by the system. The update and replace password features on the 100 record are no longer used.

For general information about this functionality, refer to the Shared: Employee Import Specification.

Business Purpose / Client Benefit: These changes provide greater security for user passwords.

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

With this release, SAP Concur will add a new Forgot Password feature to the SAP Concur Sign In page, providing an updated experience for users who log in with user name and password credentials.

Depending on a company's configuration, several other options for the forgotten password process might have been available. With this release, those additional options will be removed. The additional options that will be removed are as follows:

• Security Questions: Users will no longer receive security question prompts for login authentication.

• On-page text: Company custom text will no longer display.

• Password hints: The Send me an email with my password hint option will no longer be available.

Business Purpose / Client Benefit: This feature provides greater security for user passwords and streamlines the user experience.

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

With this release, SAP Concur no longer supports composite login sign-in page URLs.

Composite login functionality allowed users to log in to SAP Concur products using a login ID that did not include a domain name.

All users who use only their username (ex: johndoe) to log in must now use their CTE Login Name rather than their login ID to log in to SAP Concur products.

The typical URL for a composite login page includes the name of the entity (ex: entity=pxxxxxxxxx) and looks like this: https://www.concursolutions.com/signin.asp?entity=pxxxxxxxxx.

All clients will now use the standard Sign In page to access SAP Concur products. The standard sign in page is located at the following address: https://www.concursolutions.com/nui/signin

IMPORTANT!

Only the user-facing portion of composite logins is being deprecated at this time. The employee import (scheduled, overnight) and the user import (on-demand, spreadsheet) are not affected. The import will succeed, and the full username will be formed just as it is currently. When composite login information is no longer accepted in the imports, information and instructions will be provided in the release notes.

EFFECTS ON USERS

Users who log in to a composite login page (https://www.concursolutions.com/signin.asp?entity=pxxxxxxxxx) and do not use the at (@) symbol in their user name must click the Forgot your user name? link on the Sign In page to retrieve their user name without assistance (preferred) or contact their company administrator to get their CTE Login Name. User passwords remain the same.

Single Sign-On functionality is not impacted by this change. The following users will not be impacted because they do not log in using https://www.concursolutions.com:

• SAP Concur web SSO

• Concur mobile username/password

• Concur mobile SSO

Business Purpose / Client Benefit: Deprecating this feature improves login stability and login success rates, while reducing login dependency.

Concur Administration

The Amadeus user permission column has been deprecated from the Travel Addendum Import (Record Type 350) Format for user imports and for employee imports.

This column remains in the flat file and Excel import file, but it is no longer active and any values it contains will be ignored by the system.

Business Purpose / Client Benefit: This change supports work done by the Concur Travel development teams.

SAP Concur Email

SAP Concur is transitioning to a new email infrastructure for outbound email from our services to SAP Concur users. Because of this, companies that filter inbound email based on the sending IP address must add new IP addresses to their Safe Senders list to ensure that their users receive email from SAP Concur.

Initially, the issue described here affected only companies that use Concur Expense. Starting in January, email from other SAP Concur services (such as Concur Travel and Concur Pay) will move to the new email infrastructure.

We will continue to add other services throughout the first quarter of 2019. Please monitor the release notes for more information about the timing of the additional changes.

Miscellaneous

All companies must take all reasonable steps to protect the personal and sensitive information of their employees. Per recommended security-related best practices, custom fields should not contain personal or sensitive data.

NEXT STEPS

If your company is currently using custom fields to store personal or sensitive data (for example, Social Security numbers, family member names or any other personally identifying information), you should plan to remove this information from your existing fields within the service and modify your current configuration.

For additional information, refer to the FAQ (English Only).

Concur Invoice

AP Users will soon be able to view all assigned invoices to keep track of invoices they have assigned. This option will be available when they select the All Assigned Invoices option from the View list on the Unassigned Invoices page.

Business Purpose / Client Benefit: This enhancement will provide clients with a view of their assigned invoices and, thereby, giving them more control over invoices that they manage.

In a future release, clients will be able to sort using the With User Since column by clicking it when they are on a page that contains this column.

Business Purpose / Client Benefit: This enhancement will make it easier for clients to view the information they need in their daily work.

Purchase Order

The Import Now feature enables clients to import PO and PO receipt files into Concur Invoice immediately without having to wait for an overnight scheduled import. This is beneficial for clients who need to import POs and PO receipts and work with them in the Concur Invoice product the same day they are created externally. This also allows clients to do multiple PO and PO receipt imports a day for more synchronised and up-to-date data.

Business Purpose / Client Benefit: This feature gives clients control over when and how frequently to import POs and PO receipts into Concur Invoice.

Authentication

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

Single Sign-On allows users to access multiple applications using one set of login credentials. Currently, SAP Concur has two methods for signing in: with a user name and password or using SSO with identity provider (IdP) credentials, such as a user's login credentials for their organisation.

SAP Concur is planning to add a Manage Single Sign-On (SSO) feature to SAP Concur products that provides clients with a self-service option for setting up SSO for their organisation. SSO is currently supported for Concur Expense, Invoice, Request and Travel.

The new Manage Single Sign-On (SSO) feature is a replacement tool for clients using existing SSO configuration on the Security Keys page and a new tool for clients that now want to implement SSO at their organisation. Existing SSO configuration on the Security Keys page and the new SSO Self-Service tool will both be available until everyone has migrated to the new SSO Self-Service tool.

Other SAP Concur products and services are outside the scope of this initial release.

Business Purpose / Client Benefit: This feature provides SAP Concur clients with a self-service option for setting up SSO.

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur is planning to add a new Sign In page, providing an updated login experience for users who log in with user name and password credentials. Current Single Sign-On (SSO) users will be able to start the SSO login process at www.concursolutions.com. This feature is planned for 2019.

The new Sign In page feature includes the following:

• Two-step login: provides enhanced security, meets current industry standards and provides a better log in success rate

• Multi-account login: allows administrators to log in with multiple accounts (planned for a future release)

• User avatar: enhances the user experience (planned for a future release)

Business Purpose / Client Benefit: This feature provides better security and a faster, more convenient experience for users logging in to SAP Concur products and services.

Company Administration

Beginning in a future release (targeted for June), clients will access SAP Concur products and services via the following domains:

• *.concursolutions.com

• *.concurcdc.cn

This change is targeted for 8 June 2019.

SAP Concur recommends clients migrate to one of the domains at their earliest convenience, if they are not already using one of them.

Please contact appsec@sap.com for any questions regarding this change.

Business Purpose / Client Benefit: This change will allow customers to access SAP Concur services in a consistent, secure manner.

Training Administration

To simplify the Training Administration page, the functionality and content will be changing.

In addition to content changes, access to the Training Administration page will move from Company Admin to Tools.

Business Purpose / Client Benefit: These changes will make the Training Administration feature easier to find and use.

Test User Admin

SAP Concur is retiring the functionality in the Test User Admin feature that removes the transactions of test users from Concur Expense, Concur Invoice, Concur Travel and Concur Request.

Business Purpose / Client Benefit: This change will allow SAP Concur to devote more resources to development and maintenance of features that are used by many or most of our clients.