API Release Notes, November 2023

New This Month

Planned Change: Expense Report v1.1

We will be adding a new request query parameter includeInactive={Y/N} to return both active and inactive delegators for a particular delegate. If this parameter is not present the API will return only active delegators (no change from current behavior).

Now Available: Updates to Hotel Service v4

We have released several updates to Hotel Service v4 that facilitate current workflow and add new functionality for our Custom Hotel Source Providers in the Evolution of Travel. The changes are:

  • Structured way of providing check-in/check-out times as a part of /hotel/details response – no longer required to rely on textual representation of ADT code 8 (Check in check out information).
  • Cancel Deadline in CancelPenalty supports sending local time (without any Z suffix). Also CancelDeadline is now optional and can be omitted if no structured data is available from your source.
  • Ability to set availabilityStatus in the Search response to UNKNOWN if not able to fetch lead rate/status in allocated time.
  • New confirmationCodeType of PIN to allow providing any PIN as a part of the booking response that may be required for post booking operations.
  • Ability to provide informational text for rate (rateCustomText)in rates and rate-details response.

Ongoing

Planned Change: New Client SSL Certificate and Public Key for ESS webhook.api.concursolutions.com

In an effort to ensure the ongoing security of our products and services, ESS will be issuing a new webhook.api.concursolutions.com SSL certificate and public key.

Any customer who has pinned previous certificate will need to update to the new certificate. If the pinned certificate is not updated prior, your organization and users will experience disruption to SAP Concur products and services. Customers who have not pinned the certificate do not need to take any action as the new certificate is updated automatically. Most customers do not pin the certificate.

Please note that public key is changing as well. Applications that using digital signature validation will be affected and need to adopt new public key.

New certificate and public key will be published on the SAP Concur Developer Center.

NOTE: As an enhancement to our Security and Compliance program, certificate will be updated at least once a year.

 

Decommission of User v1 Password Endpoint

The decommission of the User v1 password endpoint will occur on July 28th, 2023. Clients that have not yet moved to the Concur Request v4 APIs will have until July 28th, 2023 to make the required changes. After the decommission date, the endpoint will no longer be available in Production, in accordance also with the SAP Concur API Lifecycle & Deprecation Policy.

Decommissioning of Password Provisioning

Beginning August 2nd, 2023, password provisioning for user accounts will not be supported. Any passwords provisioned through flat file, XLS, or the User v1 API will be ignored. New users will be directed to the “Forgot Password” link for their initial login.

Decommission of Password Provisioning via File Import

The decommission of password provisioning via file import will occur on October 1st, 2023. This will affect flat file imports, XLS imports, and the User v1 API. Please work with your SAP Concur representative if you have any questions.

Decommission of Existing Concur Request APIs (v1.0, v3.0, v3.1)

The decommission of the v1.0, v3.0, and v3.1 APIs is planned to conclude soon. Users that have not yet migrated to the Concur Request v4 APIs are strongly encouraged to make the required developments. Decommission is now ongoing since June 1st, 2021 and the legacy Concur Request APIs (v1.0, v3.0, v3.1) will only be supported on a limited case-by-case basis. A new decommission date will be defined and the legacy Concur Request APIs (v1.0, v3.0, v3.1) will no longer be available into Production, in accordance with the SAP Concur API Lifecycle & Deprecation Policy.

API Timeline for v1.0, v3.0, v3.1:

  • Deprecation – March 1, 2020 – May 31, 2021
  • Decommission – Since June 01, 2021

The Concur Request APIs v1.0, v3.0 and v3.1 only support the previous authentication method, which is not best security practice and does not meet the OAuth2 standards. In addition, the previous versions of the Concur Request APIs provided limited possibilities for moving a Request through the approval workflow, as well as managing custom simple & connected list fields. These issues are resolved with the new Concur Request v4 APIs.

In addition, SAP has run a backward compatibility project between the current Concur Request APIs and the new Concur Request v4 APIs (not iso-compatibility) in order to have the vast majority of use cases managed in the previous versions also be managed in the Concur Request v4 APIs.

Please work with your Concur representative to move from your current legacy Concur Request APIs (v1.0, v3.0, v3.1) towards the Request v4 APIs.

Move from the Travel Request External Validation Callout v1 to the Event Subscription Service (ESS)

The Travel Request External Validation Callout v1 API was designed to work with the Concur Request v1 API that is in the process of being decommissioned. Users relying on the Travel Request External Validation Callout v1 are strongly recommended to move to the Event Subscription Services (ESS) in order to subscribe to the Request events.

Please work with your organization to move from Travel Request External Validation Callout v1 to Event Subscription Services (ESS).

For new users willing to take advantage of the Concur Request External Validation Workflow Feature, please work with your Concur representative to rely on the Concur Event Subscription Service and configure the Concur Request Workflow accordingly.

Deprecations

APIs are being deprecated in accordance with the SAP Concur API Lifecycle & Deprecation Policy.

Date API Details
06/2023 Deprecation of Launch External URL Callout v1 The Launch External URL V1 API is deprecated as of June 16th, 2023. Decommission will follow.
12/2022 Deprecation and Decommission of Vendor v3 Vendor v3 is being deprecated and decommissioned, users will have until November 30, 2023 to migrate to the latest version of the API.
11/2022 Deprecation of User v1 Effective November 10th, 2022, the User v1 API has been deprecated. This has been replaced by User Provisioning Service v4. Decommission has been extended and will conclude on May 31st, 2024.
11/2022 Deprecation of User v3 Effective November 10th, 2022, the User v1 API has been deprecated. This has been replaced by User Provisioning Service v4. Decommission has been extended and will conclude on May 31st, 2024.
10/2022 Deprecation of Cash Advance v4 Effective October 1st, 2022, the Cash Advance v4 API is deprecated. This has been replaced by the release of Cash Advance v4.1. Decommission will follow on October 2, 2023.
10/2022 Deprecation of Hotel Service v2 Effective October 14th, 2022, the Hotel Service v2 API is deprecated. This has been replaced by the release of Hotel Service v4. Decommission will follow on October 16, 2023.
04/2021 Bulk User v3.1 API We have deprecated the Bulk User v3.1 API for the US and EMEA data centers. This API is replaced by Identity v4. Decommission will follow. Bulk User v3.1 will remain available for China data centers.
01/2021 List v3 API Effective April 16, 2021, we have deprecated the List v3 API. This API is replaced by the List v4 API. List v3 is planned to be retired in a future release.
01/2021 List Item v3 API Effective April 16, 2021, we have deprecated the List Item v3 API. This API is replaced by the List Item v4 API. List Item v3 is planned to be retired in a future release. Please migrate to the List Item v4 API as soon as possible.
06/2020 Travel Profile Notification v1 API We are deprecating the Travel Profile Notification v1 APIs due to low usage.
01/2020 List v1 API We will be retiring the List v1 API in a future release. This API is replaced by the List v4 API.

Planned Changes

Date API Planned Change
10/2023 Expense Exceptions v4 API In December, 2023, we will be releasing an API to manage exceptions on reports, entries, and allocations. We will be releasing PUT, GET, and DELETE exceptions for reports, entries, and allocations.
10/2023 Ready for Integration Event Authorized consumers of the Financial Integration Service v4 API can subscribe to a new event that will notify them when a financial posting document is ready and available for import.
10/2023 Workflow v4 An upcoming documentation update will add a Workflow v4 page under the existing Expense v4 category. This page will be populated with existing expense workflow APIs, such as the Approve or Send Back a Report API, which historically has been a section on the Reports v4 page.
09/2023 Travel Profile API 2.0 All partners and customers currently using Travel Profile API 2.0 will need to prepare their systems to support two new Gender values: Unknown and Unspecified. The support for those new values is planned to be released in Q1 2024.
06/2023 Managed List We will be releasing additional functionality to our list services with Managed Lists. A Managed List is a list in which all modifications to the list are restricted to a single app ID.
06/2023 Payroll Integration Available Without Integration with Concur Solutions (ICS) Payroll fields will be available through the Financial Integration Service (FIS) API. This allows users of the FIS API (partner apps or customers with custom integrations) to also use the API for payroll integration.
05/2023 Get Cost Objects Request v4 API This endpoint will allow external callers to view a Request’s approver related cost objects within a cost object approval workflow.
04/2023 Get Cost Object for Approver v4 API Externalizing this endpoint allows external callers to view a report’s approver related cost objects within a cost object approval workflow.
04/2023 Approve Report, Send Back Report, and Recall Report v4 APIs These APIs will replace the expense report workflow action v1.1 API. These v4 expense report workflow APIs are functionally similar to their v1 Post an Expense Report Workflow Action counterparts but will be available as separate actions. 
02/03/23 New Itinerary v4 API Endpoint for List of Trips with Travel Dates in a Specified Date Range We will be introducing a new endpoint for the Itinerary v4 API to provide a list of company trips with travel dates in a specified date range. This additional functionality will provide customers and partners with a scalable, performant, and self-serve way to retrieve a list of trips with travel dates in a specified range as they onboard companies.

On this page