Support Request – SSO Authentication Expiry Notification

[kolasolution]

Dear Concur Support,

I recently logged into SAP Concur and saw the following message:

“SSO authentication to SAP Concur solutions will expire on April 22, 2025.”

Learn more

Could you confirm whether this relates to a certificate expiring on our side, or if it is an issue on Concur’s end? If any action is required from our side, please provide guidance on the next steps.

Looking forward to your response.

Best regards,
Kola Oguntade

[KevinD]

@kolasolution hello there. I feel I must let you know that this Community is not SAP Concur Support. Can you find answers to questions here? Yes, but myself and the team I'm on are not part of our Support Organization. 🙂 I just want to make sure anyone reading this thread knows the Community does not fall under SAP Concur Support. 

Now, having said that...I found an internal article about this topic. 

"

Before the current certificate expires on Apr 22, 2025, we would recommend the Authentication Admin to update the SAP Concur IDP configuration to reference the updated certificate. If users attempt to sign in to SAP Concur Solutions via SSO with an expired SAMLv2 security certificate, your Identity Provider (IdP) might reject the authentication, and those users might be denied access to SAP Concur Solutions.

You can retrieve the SAP Concur Metadata on the following links:

US2: https://us2.api.concursolutions.com/sso/saml2/V1/sp/metadata/dd71301e-dd79-4db5-bd29-55093a75755d. 

You can also download the metadata from within SAP Concur this way:

The other option is to download it from SAP Concur. You would need to have either the Company Administrator or the SSO Manager role to download the new certificate from SAP Concur. If you do not have the SSO Manager role but have the Role Administrator, you may follow the steps in the article What Is SSO Manager Role (Expense)? to add this to your profile. Once added, you may follow the below steps to download the new certificate.

1. Go to Administration> Authentication Admin 
2. Click Manage Single Sign-on
3. In Get SAP Concur Metadata, click Download under Download SAP Concur Metadata

The other option is to download it from SAP Concur. You would need to have either the Company Administrator or the SSO Manager role to download the new certificate from SAP Concur. If you do not have the SSO Manager role but have the Role Administrator, you may follow the steps in the article What Is SSO Manager Role (Expense)? to add this to your profile. Once added, you may follow the below steps to download the new certificate.

1. Go to Administration> Authentication Admin 
2. Click Manage Single Sign-on
3. In Get SAP Concur Metadata, click Download under Download SAP Concur Metadata

The other option is to download it from SAP Concur. You would need to have either the Company Administrator or the SSO Manager role to download the new certificate from SAP Concur. If you do not have the SSO Manager role but have the Role Administrator, you may follow the steps in the article What Is SSO Manager Role (Expense)? to add this to your profile. Once added, you may follow the below steps to download the new certificate.

1. Go to Administration> Authentication Admin 
2. Click Manage Single Sign-on
3. In Get SAP Concur Metadata, click Download under Download SAP Concur Metadata