Concur Invoice

Concur Invoice users who can create invoices can now manage and customise columns from the Unsubmitted Invoices and Unsubmitted Purchase Order list views on the My Invoices page. To access the feature, invoice users click on the gear icon which opens the Manage Columns window.

They can then drag and drop fields between the Hidden and the Visible lists, depending on what they want to see in the Unsubmitted Invoices and Unsubmitted Purchase Order Invoices list views.

The Supplier Name, Invoice Number and Invoice Date columns cannot be removed (hidden). A warning message appears to notify the invoice user if they try to remove (hide) these columns.

DEFAULT COLUMNS:

• Invoice Name

• Supplier Name

• Invoice Number

• Invoice Date

• Total

• Last Comment

• With User Since

ADDITIONAL COLUMNS THAT CAN BE ADDED/REMOVED:

• Action Due Date

• Payment Status

• Approval Status

• Custom 1-20

• PO Number

• Policy Name

• Is Emergency Check Run

• Invoice Received Date

• Payment Terms

• Payment Due Date

• Payment Method

• Description

• Org. Unit 1-6

SEARCHABLE COLUMNS:

• Supplier Name

• Title

• PO Match Status

• Total

• Supplier Invoice Number

• PO Number

Any changes to columns in the Manage Columns window will be applied to both the Unsubmitted Invoices and Unsubmitted Purchase Orders list views.

In addition, if you customise columns while acting as a proxy for another user, you are customising the view for yourself only, not the user for whom you are acting as a proxy.

An In-Product Message (IPM) with information about this feature appears the first time an invoice user accesses the Unsubmitted Invoices or the Unsubmitted Purchase Order Invoices list view.

Business Purpose / Client Benefit: This feature is intended to help clients save time when they make decisions about which invoices to work on first by allowing them to add columns for the fields that are most important to them when they review their invoices.

Purchase Order

Users with the Purchase Order Processor role can now change the owner of a purchase order (PO). A new PO owner can be assigned when viewing the details of a purchase order or from the Process Purchase Orders page. The new owner will see the POs that are assigned to them on the My Purchase Orders page and will be able to manage the POs in the same ways that the previous owner did.

In order to assign a PO to a new owner the following criteria must be met:

• The PO must be an SAP Concur-generated PO (imported POs cannot be reassigned using this feature).

• The new owner must have an active SAP Concur user account.

• The new owner must have the Purchase Request User role assigned to them.

• The new owner must have access to the policy and supplier associated with the relevant PO.

Business Purpose / Client Benefit: If a PO owner is no longer an active SAP Concur user or no longer responsible for a PO, the Purchase Order Processor can assign a new owner to manage the PO and to have new invoices associated to the PO routed to the new owner.

Invoice Capture

Clients who use Concur-Managed Invoice Capture or dual support (Concur-Managed and Client-Managed Invoice Capture) now have the option to process their own invoice batches. In the All Batches window, clients can right-click an invoice batch and select Process Verification to open the invoice batch in the Verification window where they can process the invoices.

Business Purpose / Client Benefit: This feature enables clients who use Concur-Managed Invoice Capture or dual support (Concur-Managed and Client-Managed Invoice Capture) to process high-priority invoice batches.

Data Retention

The description of the Manage Holds & Purge Users data retention feature that appears on the Administration > Company > Data Retention page has been updated.

Business Purpose / Client Benefit: This update provides more accurate information about where a user with the Data Retention Administrator role can find the Hold User, Remove Hold and Purge User buttons.

Authentication

These changes are part of the SAP Concur continued commitment to maintaining secure authentication.

SAP Concur will soon begin the deprecation process of removing Hash-Based Message Authentication Code (HMAC) as an SSO option. The replacement service for HMAC is SAML SSO, a self-service method of setup whereby client admins have access within SAP Concur to complete their SAML connections.

Clients currently using HMAC are encouraged to migrate to the SSO self-service tool as soon as it is released (targeted for Q2 2020). The new SSO self-service tool allows multiple portals (Identity Providers) to be added.

The HMAC deprecation includes two phases:

PHASE I:

• Clients must have an Identity Provider (IdP) or a custom SAML 2.0 solution.

• Clients begin testing the new SSO self-service tool.

• Travel Management Companies (TMCs) partners prepare for onboarding new SAP Concur clients using the new SSO self-service tool, which is targeted for release in Q2 2020.

• Once the SSO tool is available, clients will be notified via release notes about the official deprecation date of HMAC. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded using the new SSO self-service tool.

• Existing clients using HMAC need to be migrated using the new SSO self-service tool.

PHASE II:

• Travel Management Companies (TMCs) partners continue migrating existing SAP Concur clients from the HMAC service to the new SSO self-service tool.

• Shut down the HMAC service after everyone has migrated from HMAC to the new SSO self-service tool. Phase II is targeted to end mid-year 2020.

Business Purpose / Client Benefit: This change provides better security and improved support for users logging in to SAP Concur products and services.

Security Enhancements

SAP Concur is announcing an end-of-support cycle for version 1.1 of the Transport Layer Security (TLS) encryption protocol, while continuing support for the more secure version 1.2 of TLS. The TLS protocol allows secure back and forth communications between a phone or computer and a cloud-based service.

Refusal of TLS v.1.1 connections began on 20 February, 2020.

Business Purpose / Client Benefit: SAP Concur is taking this step after careful consideration of our clients’ security and the ease of upgrading to the newer, more secure version 1.2 of TLS. This end-of-support plan for TLS v 1.1 ensures that our clients are communicating with SAP Concur solutions in a safer and more secure manner using TLS v 1.2.

File Transfer Updates

This Release Note is intended for the technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange, SAP Concur is maintaining our file transfer subsystem to provide greater security for those file transfers.

SAP Concur will begin migrating entities that currently use a legacy process for moving files to a more efficient and secure file routing process that relies on APIs.

Clients whose entities are currently configured to use the legacy process will be migrated to the more efficient process sometime between now and the end of 2020. After they are migrated to the more efficient process, clients will see the following improvement:

• With the legacy process, clients had to wait for the file move schedule to run at a specified time. With the more efficient and secure API-based process, extracts and other outbound files from SAP Concur will be available within the existing overnight processing period shortly after the files are created.

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

Business Purpose / Client Benefit: These changes provide greater security and efficiency for file transfers.

This Release Note is intended for the technical staff responsible for file transmissions with SAP Concur. For our clients and suppliers participating in data exchange through various secure file transfer protocols, SAP Concur has made changes that provide greater security for those file transfers.

As of 2 PM PST on 24 February, 2020, connections via the HTTPS protocol are no longer allowed when connecting to the SAP Concur file transfer system.

• Existing HTTPS file transfer accounts must now switch to SFTP with SSH Key.

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

• st-eu.concursolutions.com

• st-cge.concursolutions.com

• st-cge-dr.concursolutions.com

• vs.concursolutions.com

• vs.concurcdc.cn

Business Purpose / Client Benefit: These changes provide greater security for file transfers.

Miscellaneous

To ensure the ongoing security of our products and services, SAP Concur has issued a new concursolutions.com SSL certificate.

Any client who has pinned this expiring certificate will need to update to the new certificate prior to 14 April 2020. If the pinned certificate is not updated prior to 14 April 2020, your organisation and users will experience disruption to SAP Concur products and services.

Clients who have not pinned the certificate do not need to take any action as the new certificate is updated automatically. Most clients do not pin the certificate.

Business Purpose / Client Benefit: This update provides ongoing security for our products and services.

Targeted for late March, when a user signs into SAP Concur, if some products or services are unavailable while other products and services are up and running, a modified version of the user’s Home page appears, providing access to the products and services that are up and running.

Prior to implementing this improvement, if a user attempted to sign in to SAP Concur when one or more products or services was not available, a 503 (service unavailable) message appeared, the user’s Home page could not be accessed, and the user had to wait until all services and products were available before signing in to SAP Concur.

Business Purpose / Client Benefit: This enhancement enables users to complete tasks that rely on the products and services that are up and running even when other products and services might be unavailable.

Invoice Pay

In a future release, checks generated by Invoice Pay will provide security enhancements based on the latest industry standards.

Clients will be able to order sample checks by creating a Salesforce ticket and then processing and verifying the checks with their bank.

Business Purpose / Client Benefit: This enhancement will provide more security when clients process checks.

Purchase Order

In a future release, users with the Purchase Order Processor role will have the ability to reopen closed purchase orders.

Business Purpose / Client Benefit: This enhancement will provide more security when clients process checks.