Concur SSO Certificate Expiration

GENIX

Hey team,

We received an alert from SAP Concur SSO stating that we must update the certificate in our tenant by April 22nd, 2025.

The site below says the cert will expire, and we need to update it to Microsoft Azure. However, when I went into MS Azure admin portal. I SAML certificate expiration date is 9/22/2025. But when we log in to the SAP Concur as an admin, it gives us the alert that the cert will expire soon.

My question is, do we need to upload the new one? Both have different expiration dates. We want to avoid any SSO sign-on issues.

https://help.sap.com/docs/SAP_CONCUR/c5d6d15e7ecb4b4d8238b383d59ac2f4/d29608bca5c04189b0887efe016217...

KevinD

@GENIX that is a bit of a conundrum. I can't really advise on what to do in regards to updating or not since it isn't my area of expertise. I would reach out to Concur Support to see if there would be any negative impact to updating now even though the Azure portal says the certificate expires in September.

Thank you,
Kevin
SAP Concur Community Manager
Did this response answer your question? Be sure to select “Accept as Solution” so your fellow community members can be helped by it as well.

jvita

I contacted support about this. To save you time, here is their response. In short you upload Concur's metadata to your IdP.

Thank you for contacting the SAP Concur Support Team.

I understand that you have received a notification in SAP Concur regarding a certificate expiration. We would like to clarify that this does not require you to update your own SSO certificate. Instead, this notification refers to SAP Concur’s SSO certificate, which must be updated in your Identity Provider (IdP) configuration to ensure uninterrupted authentication.

You can download the certificate below and share it with your internal IT team/SSO Admin.

Production: SAP Concur Metadata (https://us2.api.concursolutions.com/sso/saml2/V1/sp/metadata/dd71301e-dd79-4db5-bd29-55093a75755d)

Test: SAP Concur Metadata (https://us2.api.concursolutions.com/sso/saml2/V1/sp/metadata/311cb6f0-8fa5-4859-8bac-31b524670ca2)

Required Action:
If you have the SSO Manager role, you can also download the certificate from SAP Concur. To do this, please follow the steps below.
1. Go to Administration> Authentication Admin
2. Click Manage Single Sign-on
3. In Get SAP Concur Metadata, click Download under Download SAP Concur Metadata
4. Test the SSO authentication to ensure a smooth transition.

Additional details regarding this can be found in the article (Article 000054477).

aorszula

Thank you, this worked for me but I did have to follow the instructions to download the metadata and then upload to the Entra Concur Enterprise app.

GENIX

In Entra for the SAML Certificate expiration, did it say April 22, 2025 or did it have a different one? I tried to reach SAP Concur support, but they copied and pasted what the article said and were not helpful. I am new to doing this, it might be user error on my end. Sorry in advance

sbrannigan

Similar situation, current certificate has a date well beyond April 22 and SAP Concur support is far from helpful. Thinking at this point that this update has no impact as even SAP's documentation mentions few customers will be impacted.