Concur Travel

(1)

Concur Travel

Concur Professional/Premium and Concur Standard

Month Audience

Release Date: May 22, 2021

Update 1: Thursday, June 03, 12:30 PM PT SAP Concur Client FINAL

** FINAL **

The enhancements and changes described in this document may or may not be included in this release. SAP Concur reserves the right to postpone implementation of – or completely remove – any enhancement/change mentioned here.

The DRAFT and FINAL release notes contain information about Concur Professional/Premium and Concur Standard.

Each note contains a table that which indicates if the enhancement/change applies to Professional and/or Standard.

The information in this presentation is confidential and proprietary to SAP SE or an SAP affiliate company and may not be disclosed without the permission of SAP SE or the respective SAP affiliate company. This presentation is not subject to your license agreement or any other service or subscription agreement with SAP SE or its

affiliated companies. SAP SE and its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation and SAP SE or an SAP affiliate company’s strategy and possible future developments, products and or platforms directions and functionality are all subject to change and may be changed by SAP SE and its affiliated companies at any time for any reason without notice. The information in this document is not a

commitment, promise or legal obligation to deliver any material, code or functionality. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of

merchantability, fitness for a particular purpose, or non-infringement. This document is for informational purposes and may not be incorporated into a contract. SAP SE and its affiliated companies assume no responsibility for errors or omissions in this document, except if such damages were caused by SAP SE or an SAP affiliate company’s willful misconduct or gross negligence.

All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making

purchasing decisions.

(4)

Release Notes

Administration

Test Company Indicators

Prof Stan   Edition

X X On: Impacts end users who use this feature/vendor; no configuration/setup by agency/

admin; cannot be turned OFF (example: new icons or rate display, new Amtrak feature) Available for use: No impact to end users unless/until configuration/setup by agency/admin (described below) (example: new rule, new Travelfusion airline) Other: Refer to the release note below

Does not apply to this edition Source / Solution Suggestion

GDS Direct Connect Solution ID Other

EMEA Data Center Scan impact

North America Data Center UI impact

China Data Center File finishing impact

X All data centers Profile/Profile API/3rd Party XML Sync Impact Affected Documentation

TSGs Fact Sheets

Admin Guides Travel System Admin User Guide Other

Overview

SAP Concur solutions now provides test companies in existing data centers. To help users distinguish between a test company and a production company, Concur Travel has been updated. Concur Travel functionality is extremely limited in these test companies. Configurations are available, search and booking functionality are not available. These test companies offer the same level of functionality as that available for Concur Expense test entities in the implementation environment.

USER/CUSTOMER BENEFIT

(5)

What the User Sees

On the Travel System Admin page, when the Show Test Companies checkbox is enabled, a column displays to indicate whether a company is a test company.

Any fields that allow users to select or enter a company name, such as a dropdown menu or autocomplete fields, is also updated with additional text that will identify a test company.

NOTE: Generally, there will not be any Test Companies visible to Travel Management Company users as these Test Companies are often created with a placeholder agency, so they are not part of their management tree.

Configuration for Professional and Standard Travel

This feature is enabled by default. There are no configuration steps.



For more information, refer to the Travel System Admin User Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

(6)

Flight

Air Search Widget Update - Include Additional Refundable Air Fares

GDS All Direct Connect

Solution ID Other

X EMEA Data Center X Scan impact

X North America Data Center X UI impact

All data centers Profile/Profile API/3rd Party XML Sync Impact Affected Documentation

TSGs Fact Sheets Admin Guides Other

Overview

When booking travel, airfare searches might only return non-refundable fares.

Because of this, SAP Concur introduced the Refundable Only Air Fares feature.

The Refundable Only Air Fares feature was built on the assumption that, using the regular air fares search feature, only one fare is returned per flight option. The fare is usually the lowest available fare, which is usually not refundable. Using the Refundable Only Air Fares feature allowed users to find refundable fares that are relevant for business travel. However, with the introduction of the branded fare concept, airlines started to return a wider range of fares that included partially or fully refundable fares. Since the Refundable Only Air Fares feature anticipated only one returned fare, using it with multiple fares caused unexpected behavior. For example, entire flights might be excluded, instead of only non-refundable fares.

(7)

The search widget has been updated to include the Include additional refundable air fares checkbox.

Example: Flight Search screen

NOTE: These changes effect only those customers that have the Show refundable ticket checkbox enabled within their Travel Configuration.

(8)

Ongoing CIBT – Retirement of Legacy Integration

Information First Published Information Last Modified Feature Target Release Date

February 2020 October 13, 2020 August 01, 2021

Any changes since the previous monthly release are highlighted in yellow in this release note.

X EMEA Data Center Scan impact

X North America Data Center UI impact

TSGs CIBT – Visa and Passport Alert Service Travel Service Guide Fact Sheets

Admin Guides Other

Overview

In February 2020, SAP Concur and CIBT (CIBTvisas) launched a new integration method through the SAP Concur App Center, where the new CIBT app is available.

The legacy integration method with CIBT is still supported during a transition period but SAP Concur will eventually retire the Legacy Batch File protocol integration method, targeted for August 01, 2021.

With the new integration through the SAP Concur App Center, the CIBT service is available for additional countries. Travelers whose profiles are associated to a Concur Travel configuration based in Denmark, Finland, Ireland, Norway, or Sweden can now benefit from CIBTs visa services.



For more information on the new CIBT Integration and how to set it up, refer

(9)

CIBT will be able to support clients and travelers in more countries and with a more stable, scalable integration. The new integration method also reduces the

configuration effort for admin users in Concur Travel.

There is no visible indication to the traveler at the time of booking that the feature is enabled or if action is required. Concur Travel automatically engages with CIBT in the background to begin the traveler experience. As to end user experience, there are no changes compared to the old integration method.



Examples of the emails received from CIBT after booking an international trip can be found in the CIBT Travel Service Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

With the planned retirement of the legacy integration method, existing configuration settings on the Concur Travel admin UI will be removed. This includes:

• In the Professional Edition, on the Travel Configuration page, the Send Profile/Travel Data to CIBT check box.

• In the Professional Edition, the Manage CIBT Configuration admin page.

• In the Standard Edition, the Visa / Passport Services tab on page/setup step Discounts and Travel Content.



To apply for the new integration method via the App Center:

1. Go to the SAP Concur App Center and select the CIBT App.

2. Click Connect.

NOTE: If the Connect button is not available, your user does not have Admin privileges in Concur Travel. Contact your company administrator for assistance.

(10)

3. Review and opt-in to the following elements in the displayed overlay:

 SAP Concur App Center End-User Terms & Conditions.

 Shared Information.

 Company Authorization to Link Services.

NOTE: Opt-in is required only once. If you enabled other App Center partners previously and accepted the electronic Company Authorization to Link Services, you may not be required to opt-in again.

(11)

4. Fill in the activation form in an overlay hosted by CIBT where CIBT will collect the following information:

 First Name, Last Name, and Email

 Company Entity (company or business name)

 Country

 Is this company an existing client? If the administrator is an active CIBT client, the CIBT account code for activation is captured.

 If you would like to activate CIBT for multiple countries or Travel configurations in Concur Travel, click Add another company entity, displayed near the bottom of the CIBT activation form. If you want to enable additional countries after already having enabled the

integration with CIBT through the SAP Concur App Center, contact your CIBT representative. CIBT will need your business name and the list of countries that you would like to be enabled.

(12)

5. At submission, an email will be sent to [email protected]. The information in the previous step is collected via the Activation Form and will be sent through email to CIBT.

6. CIBT will activate the client in the CIBT database system for Visa Alert. Only for customers that used the legacy integration method so far: CIBT will turn this integration method off from their end in favor of the new integration via Concur’s App Center.

Reconnection Required

!

This section applies only to customers who connected with CIBT prior to February 25, 2021.

While the new CIBT SAP Concur App Center integration has been available since February 15, 2020, all customers who connected with CIBT on or before

February 24, 2021 will need to reconnect. The version that you originally connected to has since been updated. Customers who connected after February 24, 2021 are using the newest integration and no action is required.

(13)



To reconnect the Integration:

1. Go to the SAP Concur App Center and locate the CIBT application.

2. Click Disconnect.

3. To reconnect, follow the steps as described in the section Setup of CIBT Integration in the SAP Concur App Center of the CIBT – Visa and Passport Alert Service Travel Service Guide.

Ongoing Travelport Seat Map Upgrade

March 2021 April 2021 Q2 2021

On: Impacts end users who use this feature/vendor; no configuration/setup by agency/

admin; cannot be turned OFF (example: new icons or rate display, new Amtrak feature) Available for use: No impact to end users unless/until configuration/setup by agency/admin (described below) (example: new rule, new Travelfusion airline) X X Other: Refer to the release note below

GDS Apollo, Galileo, Worldspan Direct Connect

TSGs

Fact Sheets Travelport (Apollo/ Worldspan/ Galileo) Upgrades Fact Sheet Admin Guides

Other

(14)

Overview

Concur Travel now supports a new version of seat maps using the Travelport Universal API platform.

SAP Concur is currently running a pilot with pre-selected customers and TMCs, targeted to release to all customers by the end of the second quarter of this year.

The new seat map user experience is accurate and reliable, considering the

customer’s Frequent Flyer status and the fare type selected. The old seat maps did not account for either of these.

The new seat map provides an improved seat selection success rate as we now have better understanding of seat availability.

The following screenshots demonstrate the current seat map display as compared to the enhanced seat map display that will be returned via the new Travelport

Universal API. The screenshots are for Air Canada between Los Angeles (LAX) and Toronto (YYZ) airports.

This new version does not change the behavior of seat maps functionality on the search results page and the users will still see a “View Only” version of the seat map for each flight option on the search results page.

The links on the Review and Reserve and post-booking Itinerary page are updated.

(15)

Current pre-booking seat map, which does not validate fare type and displays a generic seat map:

(16)

New pre-booking seat map, which validates fare type and displays an accurate seat map:

(17)

Current post-booking Itinerary seat map, which does not validate fare type and displays a generic seat map:

(18)

New post-booking Itinerary seat map, which validates fare type and displays an accurate seat map:

KNOWN LIMITATIONS

Like all other GDS customers, Travelport customers will not be able to purchase seats directly in Concur Travel. Users can, however, view and select seats that do not require payment and are included in the fare or the frequent flyer status. All paid seats will be shown as unavailable.

United Airlines, American Airlines, and Delta Air Lines do not use the Airline Tariff Publishing Company (ATPCO) standards, so their seat mapping may be inconsistent.

To avoid issues due to these inconsistencies, SAP Concur made the decision to not upgrade these three airlines to the newest version before booking is complete.

Customers can still use the new experience after they have completed the booking.

(19)

FAQ

Q. How long do we run the pilot?

A. The pilot for will be run for two months. We will start with a select group of customers for the first month and add more customers afterwards.

Q. How is the feature enabled?

A. Customers interested in participating in the pilot may speak to their account managers, who will see that the feature is enabled.

Q. Do customers need any additional setup to test this feature?

A. No.

Q. How do I contact Concur Travel support?

A. Customers and TMCs can open tickets on Salesforce for any issues found during the pilot. It is strongly recommended that you include the text

“Travelport UAPI seat map pilot” in the title, which will enable the SAP Concur support team to clearly identify tickets related to the pilot and involve the appropriate team(s).

No configuration change is required. There are no significant changes to the seat maps feature’s appearance and functionality.

As this is a controlled pilot release, the SAP Concur Development team will enable the feature for selected customers.



For more information on the Universal API platform, refer to the Travelport (Apollo/ Worldspan/ Galileo) Upgrades Fact Sheet. To locate, refer to

Additional Release Notes and Other Technical Documentation in these release notes.

(20)

Hotel

Hotel Service Support for Hotel Confirmation Number (Professional Only)

admin; cannot be turned OFF (example: new icons or rate display, new Amtrak feature) Available for use: No impact to end users unless/until configuration/setup by agency/admin (described below) (example: new rule, new Travelfusion airline) X Other: Refer to the release note below

GDS

Direct Connect Only Custom Hotel sourcing partners Solution ID

Other

TSGs Fact Sheets Admin Guides

Other SAP Concur Developer Center, Direct Connect - Hotel v2 - Search

Overview

SAP Concur is collecting the hotel confirmation number from Hotel Service v2 API content providers.

With this release, the hotel-specific confirmation number is available in the Hotel Service v2 API reservation response.

This information is necessary to facilitate the booking and critical to ensuring a traveler’s Concur Travel itinerary includes the details they need to successfully check-in. This helps to automate the process of matching e-receipts and credit card statements to itineraries, to be implemented in the future.

(21)



For more information, please refer to SAP Concur Developer Center, Direct Connect - Hotel v2 - Search. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

Ground

Limos.com Decommission

GDS

Direct Connect Limos.com Solution ID

Other

North America Data Center X UI impact

TSGs Ground Content Suppliers Travel Service Guide Fact Sheets

Admin Guides Other

Overview

Concur Travel has previously provided travelers the capability to book limousine transfers via Limos.com.

As of the April 2021 release, Limos.com became a maintained feature, where feature requests and support cases are no longer accepted.

As of this month, this feature will be decommissioned. With continued pre-pandemic declines in Limos.com transfers booked via Concur Travel, combined with

requirements to maintain the service, future investment in this feature is uneconomical.

SAP Concur recognizes that some customers still need to utilize Limos.com transfer capabilities; it is recommended that users switch to any of the remaining suppliers:

SummitQwest, Groundspan, and Talixo.

(22)

As of the April 2021 release, SAP Concur automatically disabled this feature for all travel configurations; administrators are no longer able to adjust the setting for this content supplier.

NOTE: Technically, it may be possible for users to book this content after the April 2021 release if the supplier doesn’t turn off this functionality on the same day.

As of this month, SAP Concur will definitively close the content channel.

No additional action is required by administrators to support this change, however, SAP Concur recommends that clients provide messaging within Concur Travel to inform travelers of this change.



For more information, refer to the Ground Content Suppliers Travel Service Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

Groundscope Decommission

GDS

Direct Connect Groundscope Solution ID

Other

North America Data Center X UI impact

TSGs Ground Content Suppliers Travel Service Guide Fact Sheets

(23)

As of the April 2021 release, Groundscope became a maintained feature, where feature requests and support cases are no longer accepted.

As of this month, this feature will be decommissioned. With continued pre-pandemic declines in Groundscope transfers booked via Concur Travel, combined with

requirements to maintain the service, future investment in this feature is uneconomical.

SAP Concur recognizes that some customers still need to utilize Groundscope

transfer capabilities; it is recommended that users switch to the any of the remaining suppliers: SummitQwest, Groundspan and Talixo.

As of the April 2021 release, SAP Concur automatically disabled this feature for all travel configurations; administrators are no longer able to adjust the setting for this content supplier.

NOTE: Technically, it may be possible for users to book this content after the April 2021 release if the supplier doesn’t turn off this functionality on the same day.

As of this month, SAP Concur will definitively close the content channel.

No additional action is required by administrators to support this change, however, SAP Concur recommends that clients provide messaging within Concur Travel to inform travelers of this change.



For more information, refer to the Ground Content Suppliers Travel Service Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

(24)

Profile

Allowable Values Enforcement for NamePrefix, NameSuffix, and PreferredLanguage in Travel Profile 2.0 API

All data centers X Profile/Profile API/3rd Party XML Sync Impact Affected Documentation

TSGs Travel Profile API Travel Service Guide Fact Sheets

Admin Guides Other

Overview

SAP Concur solutions has not previously enforced any validation for the

NamePrefix, NameSuffix, and PreferredLanguage fields via the Travel Profile v2 API. As a result, data provided or updated via the API is often nonsensical and potentially exposes personal information in those fields (e.g. user’s loginID in the prefix field). Even though the user interface provides drop-down values, which ensures that user-entered values are valid, the Travel Profile v2 API does not.

SAP Concur will start enforcing allowable values for these three fields, as follows:

PreferredLanguage field:

As of this month, existing values that are not on the list of allowable values

(25)

The List of Allowable values for the PreferredLanguage field will be found in the Travel Profile v2 API Developer Center Guide and in the Travel Profile API TSG (links below).

NamePrefix and NameSuffix fields:

1. As of this month, SAP Concur will publish updated release notes and updated documentation before additional changes are implemented.

Updates to other user profile fields will not be affected. For example, if NamePrefix is set to empty string, the user’s first and last names will update correctly even if they are in the same API call.

This change will reduce the risk of sharing personal data in unintended ways. More consistent user data will result in better stability and fewer escalations.



For more information, refer to the Travel Profile API Travel Service Guide or the SAP Concur Developer Center, Travel Profile v2 – Resource for the list of allowable values. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

(26)

Security

Concursolutions.com SSL Certificate Renewal (May 26)

April 2021 -- May 26, 2021

x All data centers Profile/Profile API/3rd Party XML Sync Impact Affected Documentation

Overview

To ensure the ongoing security of our products and services, the

concursolutions.com SSL certificate is updated on an annual basis. The current certificate was issued on April 14, 2020 and will expire when SAP Concur issues a new certificate on May 26, 2021.

Clients who have not pinned the expiring certificate do not need to take any action as their expiring certificate will be renewed automatically. Most clients do not pin the certificate.

(27)

The new SSL certificate can be accessed through the following URL:

http://assets.concur.com/concurtraining/cte/en-us/concursolutions.cert.pem To obtain the certificate, a client’s IT department can:

• View the certificate by clicking the link, select all the text in the browser window, copy and paste the text into a plain text file, and then name the file concursolutions.cert.pem or concursolutions.cert.cer.

• Click the link, right-click the web page, and then click Save as in the context menu. Save the file with the file name concursolutions.cert.pem or

concursolutions.cert.cer.

• Obtain the certificate from Akamai, our provider, using the following OpenSSL command:

openssl s_client -connect global-wc.concursolutions.com.edgekey- staging.net:443v

NOTE: If you are not sure whether your concursolutions.com certificate is pinned, consult with your IT department.

(28)

Miscellaneous

Ongoing Deprecation of HMAC Initiates Migration to SSO Self- Service

July 12, 2019 November 25, 2020 Phase I: July 2020

Phase II: July 1, 2021 Any changes since the previous monthly release are highlighted in yellow in this release note.

NOTE: These changes are part of our continued commitment to maintaining secure authentication.

Overview

SAP Concur support for Hash-Based Message Authentication Code (HMAC) is being deprecated. Travel Management Companies (TMCs) and SAP Concur personnel are currently assisting customers who use HMAC to migrate to SAP Concur SAML v2 SSO

(29)

NOTE: SAML v2 supports the use of multiple identity providers (IdPs).

The HMAC deprecation includes two phases:

Phase I:

• Clients must have an identity provider (IdP) or a custom SAML 2.0-compliant solution.

• Clients begin testing authentication using SAML v2.

• TMCs prepare to onboard new SAP Concur clients to SAML v2.

• Customers will be notified via release notes about the official deprecation date of HMAC. As of the official deprecation date, no new clients can be onboarded using HMAC; new clients must be onboarded to SAML v2.

• Existing clients using HMAC must migrate to SAML v2.

Phase II:

• TMCs have migrated all existing SAP Concur clients from the HMAC service to SAML v2.

• The HMAC service is deprecated. Phase II is targeted to end mid-year in 2021.

This change provides better security and improved support for users logging in to SAP Concur products and services.

Configuration for Professional and Standard Travel MIGRATION FOR TMCS

TMCs will be significantly impacted and should begin testing now to prepare for migration to SAML v2.

TMCs must set up SAML v2 instead of HMAC for their new clients. Setting up SAML v2 now allows more time for TMCs to test SAML v2 and to train internal staff to assist clients.

To prepare for Phase I of the HMAC deprecation:

• TMCs must support SAML 2.0 compliant SSO. TMCs must contract for or develop their SAML 2.0 compliant solution. TMCs must have an Identity Provider (IdP).

• Once support for SAML 2.0 compliant SSO is established, TMCs that need more information can open a case with SAP Concur support. TMCs do not need to use the online order form to request setup.

(30)

MIGRATION FOR LEGACY HMACCLIENTS

Clients should begin testing SAML v2 immediately to prepare for migration.

To prepare for Phase I of the HMAC deprecation:

• Clients must have an Identity Provider (IdP) or a custom SAML 2.0 compliant solution.

• Clients can coordinate with SAP Concur support now to complete migration to SAML v2.

• Clients can choose to use the Single Sign-On self-service option.



For more information about the Single Sign-On self-service option, refer to the Single Sign-On Overview and the Single Sign-On Setup Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

Ongoing Mandatory SFTP with SSH Key Authentication

April 9, 2021 April 16, 2021 Ongoing in 2021

TSGs

(31)

Overview

This release note is intended for technical staff responsible for file transmissions with SAP Concur products. For SAP Concur customers and vendors participating in data exchange through various secure file transfer protocols, SAP is making changes that provide greater security for those file transfers.

As of April 10, 2021, non-SFTP (Secure File Transfer Protocol) protocols and SFTP password authentication are not allowed to connect to SAP Concur for file transfers:

• Non-SFTP file transfer accounts must switch to SFTP with SSH Key Authentication.

• SFTP file transfer accounts that use password authentication must switch to SSH key authentication.

• SFTP password reset requests require the client to provide an SSH key for authentication.

!

IMPORTANT: If you are not using SFTP with SSH Key Authentication, you must take action to avoid disruption of your file transfer connections.

On April 12, 2021, SAP started disabling non-compliant file transfer connections. The process of disabling non-compliant accounts will continue throughout 2021. If you have multiple file transfer connections configured, this change applies to all of your file transfer connections.

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

• st-eu.concursolutions.com

• vs.concursolutions.com

• vs.concurcdc.cn USER/CUSTOMER BENEFIT

These changes provide greater security for file transfers.

If assistance is required, please contact SAP Concur support.



For more information, refer to the File Transfer for Customers and Vendors User Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

(32)

Ongoing SAP Concur Legacy File Move Migration

March 6, 2020 January 8, 2021 Ongoing until July 31, 2021

Overview

This release note is intended for the technical staff responsible for file migrations with SAP Concur solutions. For our customers and vendors participating in data exchange, SAP Concur solutions is maintaining our file transfer subsystem to provide greater security for those file transfers.

SAP Concur is in the process of migrating entities that currently use a legacy process for moving files to a more efficient and secure file routing process that relies on APIs.

Clients whose entities are currently configured to use the legacy process will be migrated to the more efficient process sometime between now and July 31, 2021.

After they are migrated to the more efficient process, clients will see the following improvement:

(33)

These changes provide greater security and efficiency for file transfers.

If assistance is required, please contact SAP Concur support.



REAL ID Deadline Extended

GDS All GDS

Direct Connect Southwest, Travelfusion Solution ID

Other

TSGs Company Settings Travel Service Guide Fact Sheets

Admin Guides Other

Overview

Due to circumstances resulting from the ongoing COVID-19 pandemic, the Department of Homeland Security has again extended the REAL ID enforcement deadline. The new deadline for REAL ID enforcement is May 3, 2023.

The U.S. Transportation Security Administration is reminding travelers that, beginning May 3, 2023, every traveler must present a REAL ID-compliant

identification, such as a driver's license or passport, to fly within the United States.

Read the official announcement here.



For more information, refer to the DHS website: https://www.dhs.gov/real-id, or the REAL ID FAQ: https://www.dhs.gov/real-id-frequently-asked-

questions.

(34)

To avoid disruption at the airport, please be sure to communicate these changes to your travelers. There are several custom text options available:

• Home page custom text

• Profile custom text

• Search Results custom text

• Itinerary custom text

• Configurable messaging

Ongoing Rotating PGP Key Available for File Transfers

TSGs Fact Sheets

Admin Guides File Transfer for Customers and Vendors User Guide Other

Overview

Files transferred to SAP Concur products must be encrypted with the SAP Concur public PGP key, concursolutionsrotate.asc.

• Key file is available in client’s root folder.

• Key ID 40AC5D35.

(35)

The SAP Concur legacy PGP key (key ID D4D727C0) remains supported for existing clients but will be deprecated in the future.

SAP Concur strongly recommends that clients use the more secure rotating public PGP key for file transfers. To facilitate the use of the more secure rotating public PGP key for file transfers, SAP Concur added the key to existing client’s home folders on Friday, January 15, 2021.

This announcement pertains to the following file transfer DNS endpoints:

• st.concursolutions.com

• mft-us.concursolutions.com

• vs.concursolutions.com

• st-eu.concursolutions.com

• mft-eu.concursolutions.com USER/CUSTOMER BENEFIT

The rotating public PGP key provides greater security for file transfers.

What the Administrator Sees

An administrator with the required file transfer credentials can log into the file transfer site to retrieve the rotating public PGP key, concursolutionsrotate.asc, from the root directory.

Your internal file transfer administrator can add the key to their PGP keyring and start using it to encrypt any files being transferred to SAP Concur.

NOTE: If assistance is required, please contact SAP Concur support.



(36)

Planned Changes

The items in this section are targeted for future releases. SAP Concur solutions reserves the right to postpone implementation of – or completely remove – any enhancement or change mentioned here.

!

IMPORTANT: These Planned Changes may not be all of the upcoming

enhancements and modifications that affect this SAP Concur product or service.

The Planned Changes that apply to multiple SAP Concur products and/or services are in a consolidated document. Please review the additional Planned Changes available in the Shared Planned Changes Release Notes. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

Administration

Planned Changes Travel Emails Migration to Notification Services, Update Safe Sender List

May 2021 - July 2021

(37)

Overview

Since 2018, we have moved most of our e-mail notifications service to a new cloud platform. Because of this transition, companies who filter inbound e-mail based on the sending IP address must add new IP addresses to their Safe Sender list. This ensures that their users are able to receive e-mail from SAP Concur.

In 2021, we plan to move e-mails sent from Concur Travel for all customers to our e- mail notifications service running on a new cloud platform. Additionally, on the EMEA data center (DC) only, we plan to make an IP address update for all SAP Concur solutions. To ensure your organization is prepared, we recommend making any changes by July 1, 2021.

Initially, this transition affected only companies using Concur Expense. Now, e-mail from Concur Travel will also use the new e-mail infrastructure.

Customers on the North America Data Center using Concur Expense have already added the IP addresses to their allow-list and are not affected.

Customers on the North America Data Center using Concur Travel without Concur Expense will be affected by this change if they filter incoming e-mail based on IP addresses.

All customers on the EMEA Data Center filtering incoming e-mail based on IP

addresses are affected by the change. This includes customers that are using Concur Expense and have previously added IP addresses to their Safe Sender list.

SAP Concur is including additional IP addresses from which e-mails will be sent.

NOTE: This change affects only companies that filter incoming e-mail based on IP addresses.

This new service improves stability and security. It significantly speeds up the time to process and dispatch e-mails.

New IP addresses are not published but can be requested from SAP Concur support.

If your company filters incoming e-mail based on IP addresses, please work with your e-mail server management team to ensure that all required Safe Sender lists for IP addresses are updated. This will ensure that your users receive SAP Concur e-mail without interruption.

(38)

Ground

Planned Changes Park ‘N Fly Decommission

February 2021 June 2021

GDS

Direct Connect Park “N Fly Solution ID

Other

TSGs Park 'N Fly Travel Service Guide

Trip Cancel and Voids Travel Service Guide Multi-User Clone Trip Travel Service Guide Fact Sheets

Admin Guides

Other Travel Setup Guide For Concur Standard

Overview

Concur Travel currently provides travelers the capability to purchase Park ‘N Fly off-airport parking near certain airports with a discounted rate at the time of booking.

This feature was provided to offer a cost-effective alternative to on-airport parking at many airports in the United States.

(39)

Targeted for the April release, Park N Fly becomes a maintained feature (feature requests or support cases will no longer be accepted). Targeted for the June release, this feature will be decommissioned for the following reasons:

• Continued pre-pandemic declines in usage of Park ‘N Fly booked via Concur Travel, combined with requirements to maintain the service and necessary functional updates (such as airport locations due to permanent Park ‘N Fly location closings) makes future investment in this feature uneconomical.

• Other discounted off-airport parking options are available to travelers in addition to the Park ‘N Fly product. A generic parking solution that is limited to US locations does not fully reflect all offerings and capabilities across the global off-airport parking landscape.

• e-Receipts are not supported (requires manual reimbursement process for travelers).

SAP Concur recognizes that some customers still have a need to utilize Park ‘N Fly capabilities; it is recommended to direct travelers to the Park ‘N Fly website where they can still book in advance and receive a discounted parking rate.

In the future, Concur Travel and Park ‘N Fly will assess the viability of re-introducing the Park ‘N Fly product as an app center product, independent of the corporate booking tool.

Targeted for the June 2021 release, SAP Concur will automatically disable this feature for all travel configurations.

No additional action is required by administrators to support this change. However, SAP Concur recommends that clients provide messaging within Concur Travel to indicate that travelers must book parking directly on the Park ‘N Fly website.



For more information, refer to the Park ‘N Fly Travel Service Guide. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

(40)

Profile

Planned Changes XML Profile Sync No Longer Available as of December 31, 2021

March 2021 -- December 31, 2021

All data centers X Profile/Profile API/3rd Party XML Sync Impact Affected Documentation

TSGs Travel Profile API Travel Service Guide Fact Sheets

Admin Guides Other

Overview

The XML Profile Sync, which is used to synchronize Concur Travel user profile data with TMC partners, will no longer be available, targeted for the end of 2021. We advise all partners to engage with SAP Concur representatives to adopt the Travel Profile v2 API for managing Travel User profiles.

(41)



For more information, refer to the Travel Profile API Travel Service Guide and to the SAP Concur Developer Center, Travel Profile v2 - Resource. To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

Travel Operations / Technical Essentials

Planned Changes PNR Queue Processing – Required ID Remarks

April 2021 April 2021 August 2021

GDS Sabre, Amadeus, Worldspan, Galileo/Apollo Direct Connect

x All data centers Profile/Profile API/3rd Party XML Sync Impact Affected Documentation

TSGs Fact Sheets Admin Guides

Other Agency Partners – GDS Worksheets – PNR Acquisition (Formerly Reporting Requirements)

(42)

Overview

In order for Concur Travel to process offline bookings and updates to online

bookings, specific information must be present in the PNR. Today, all of the following are required pieces of information:

1. Company ID (CLIQCID)

2. Travel Configuration ID (CLIQCONFIGID) 3. Login ID (CLIQUSER)

However, while all of these have historically been required, SAP Concur did not always reject PNRs when required fields were missing. With this update, these requirements will be enforced. Any Sabre, Amadeus, or Worldspan PNRs missing required information will be rejected and placed in the error queue. Galileo and Apollo PNRs missing required information will be rejected.



For more information, refer to the Agency Partners – GDS Worksheets – PNR Acquisition (Formerly Reporting Requirements). To locate, refer to Additional Release Notes and Other Technical Documentation in these release notes.

Concur Travel uses the Travel Configuration ID to match trips to the correct configuration. This information will also be used to identify Compleat-integrated customers. Without it, Concur Travel/Compleat integration features will not be available.

Configuration for Professional and Standard Travel GDSFORMAT –SABRE

Company ID

Add an invoice remark to the company level profile (Level 1 STAR) as a mandatory move line.

The format should read as follows:

5.Z*CLIQCID-<Company_ID>

Concur Travel

Concur Travel

Contents

Release Notes

Administration

Test Company Indicators



Flight

Air Search Widget Update - Include Additional Refundable Air Fares

**Ongoing** CIBT – Retirement of Legacy Integration







!



**Ongoing** Travelport Seat Map Upgrade



Hotel

Hotel Service Support for Hotel Confirmation Number (Professional Only)



Ground

Limos.com Decommission



Groundscope Decommission



Profile

Allowable Values Enforcement for NamePrefix, NameSuffix, and PreferredLanguage in Travel Profile 2.0 API



Security

Concursolutions.com SSL Certificate Renewal (May 26)

Miscellaneous

**Ongoing** Deprecation of HMAC Initiates Migration to SSO Self- Service



**Ongoing** Mandatory SFTP with SSH Key Authentication

!



**Ongoing** SAP Concur Legacy File Move Migration



REAL ID Deadline Extended



**Ongoing** Rotating PGP Key Available for File Transfers



Planned Changes

!

Administration

**Planned Changes** Travel Emails Migration to Notification Services, Update Safe Sender List

Ground

**Planned Changes** Park ‘N Fly Decommission



Profile

**Planned Changes** XML Profile Sync No Longer Available as of December 31, 2021



Travel Operations / Technical Essentials

**Planned Changes** PNR Queue Processing – Required ID Remarks



Ongoing CIBT – Retirement of Legacy Integration

Ongoing Travelport Seat Map Upgrade

Ongoing Deprecation of HMAC Initiates Migration to SSO Self- Service

Ongoing Mandatory SFTP with SSH Key Authentication

Ongoing SAP Concur Legacy File Move Migration

Ongoing Rotating PGP Key Available for File Transfers

Planned Changes Travel Emails Migration to Notification Services, Update Safe Sender List

Planned Changes Park ‘N Fly Decommission

Planned Changes XML Profile Sync No Longer Available as of December 31, 2021

Planned Changes PNR Queue Processing – Required ID Remarks