3815218 - Single Sign-On (SSO) for SAP Concur - Overview

SAP Concur supports Single Sign-On (SSO) via SAML (Secure Assertion Markup Language) v1.1 & v2.0. 

• SAML is an open standard for exchanging authentication and authorization data between an identity provider (Client Portal) and a service provider (Concur)
• SAML is a specification for a specific type of XML, which defines how the XML is formatted, encoded, passed through the internet, decoded and validated
• SAML uses the HTTPS protocol to transfer SSO assertions across the Internet. An assertion is a string of XML that communicates and validates a user’s identity between the identity provider (your company’s directory) and the service provider (Concur)
• The login identity is specifically the Concur Login ID. The the login ID can be an email or any other alpha-numeric combination which includes the @ symbol. The Login ID in your company directory must be identical to the Concur Login ID
• SAP Concur currently has a legacy platform (on Company Admin > Security Keys) and a new platform (on Company Admin > Authentication Admin) where new implementations are handled and new features are released. Even though SAP Concur still supports the legacy SAML platform, we do recommend that clients migrate to the new SAMLv2 platform for better user experience and performance.
• Since July 2021 HMAC SSO is no longer supported by SAP Concur. We recommend and will provide support to clients so they migrate their SSO configurations to the SAMLv2 platform.

Document explaining Single Sign-On (SSO) for SAP Concur , KBA , CON-INT-SSO , SSO Integration with Concur , CON-CA-ADM-AUA-MMS , Manage Mobile Sign-On , Problem