Some customers are receiving pop up messages re: SSO. I have the pop up below and a customer question below. If anyone knows how to answer let me know. I have raised the question with Concur.
To be clear, we use Concur SSO, but we don’t use their certificate as part of the SSO connection that we have setup with them. With our SSO configuration we only need their website address to know where we send any SSO requests. They on the other hand need our Certificate so that they know that the request is really coming from us. There is an option to utilize their certificate but it is almost never used, and we don’t use that option with any of our SSO setups. Still do you have a contact that I can reach out to ensure that along with the certificate being change they are not changing the address with it. If they did that that would cause issue.
You may have received a notification in SAP Concur regarding a certificate expiration. Please note that this does not require you to update your own SSO certificate. Instead, it pertains to SAP Concur’s SSO certificate, which must be updated in your Identity Provider (IdP) configuration to maintain uninterrupted authentication.
Required Action:
Please share the updated certificate with your internal IT team or whoever manages your SSO configuration.
- Production Metadata: SAP Concur Metadata [us2.api.concursolutions.com]
- Test Metadata: SAP Concur Metadata [us2.api.concursolutions.com]
If you have the SSO Manager role, you can also download the certificate directly from SAP Concur by following these steps:
- Navigate to Administration > Authentication Admin
- Click Manage Single Sign-On
- Under Get SAP Concur Metadata, click Download
- Test SSO authentication to ensure a smooth transition
Reach out to their IT team to complete this update.
Thanks,
