API Release Notes, August 2025

New This Month

Now Available: Support of Hotel Date Modification for Hotel Connectors

Hotel connectors support the modification of check-in and check-out dates using the Hotel Service v4 Modify endpoint. This allows users to change their dates of stay without having to cancel and rebook. When a user selects Change, we will send a rate-details request to the connector using the same ratePlanId as used in the original booking, together with the confirmationCodes associated with the original booking. The Hotel Connector will respond with the price details for the new dates so the user can review and accept. Once the user confirms the change request, we will invoke the modify endpoint.

The support of modification is optional. If the modification is supported by the Hotel Connector, they must send back the following flag in the Reservation response indicating whether that booking can be modified:

 ],
 “isModifiable”:  true
}

Now Available: POST Operation Change in Attendee v4

The Attendee v4 API will have the POST behavior changed. During a POST operation, even if a single attendee matches the duplicate criteria, a duplicate error will be thrown.

Ongoing

Preview: Public Certificate Root Change

To maintain compliance with evolving security standards and ensure uninterrupted compatibility with Mozilla-based browsers, we are transitioning our digital certificates to the updated DigiCert Global Root G2 and G3 authorities:

• DigiCert Global Root G2 – for RSA-based certificates

• DigiCert Global Root G3 – for ECDSA-based certificates

This proactive update follows DigiCert’s announcement regarding Mozilla’s planned deprecation of the DigiCert Global Root CA.

Adopting the new root certificates is critical to avoid potential trust errors or connection issues when accessing our services via Mozilla browsers.

Target Implementation Dates:

Clients who have not pinned the certificate do not need to take any action as the new certificate will automatically be updated when it becomes available.

RECOMMENDATION – Please Read Carefully

Certificate pinning is not recommended.

While it may add a layer of control, pinning certificates introduces risks. Certificates used by SAP Concur are renewed on a regular basis. Pinned certificates are not updated automatically and may cause service disruptions if not updated before implementation date.

FOR SAP ICS Customers

Please refer to section 2 “Which SSL certificates do I need to have installed” of 2914977 - FAQ: Concur Certificates, Authentication, and Connectivity for detailed instructions.

ACTION REQUIRED

If your systems pin the root or intermediate certificate, you must update your trust store to include the following certificates:

RSA Certificates Download Links

• Intermediate: DigiCert Global G2 TLS RSA SHA256 2020 CA1
• Root: DigiCert Global Root G2

ECDSA Certificates Download Links

• Intermediate: DigiCert Global G3 TLS ECC SHA384 2020 CA1
• Root: DigiCert Global Root G3

Note: Most modern systems now prefer ECDSA for connections, while RSA is still used primarily by legacy systems. To ensure full compatibility, please ensure that your systems trust both ECDSA and RSA certificates.

CERTIFICATE CHAIN LINKS: (consist of end-entity, Intermediate, and Root certificates respectively). If your system is pinning the end-entity certificate, see the links below. Please make sure to open the link in an Incognito or Private browser window to ensure there is no cached data causing outdated or incorrect content to appear.

*.concursolutions.com

https://assets.concur.com/concurtraining/cte/en-us/concursolutions-com-chain_ECDSA.pem

https://assets.concur.com/concurtraining/cte/en-us/concursolutions-com-chain_RSA.pem

*.api.concursolutions.com

https://assets.concur.com/concurtraining/cte/en-us/api-concursolutions-com-chain_ECDSA.pem

https://assets.concur.com/concurtraining/cte/en-us/api-concursolutions-com-chain_RSA.pem

You can test the certificate here.

Previews

In general, this table lists items that will be shipping in the next 30-60 days. For a broader view of features that are coming, please see our Road Map Explorer.

Deprecations and Decommissions

APIs are being deprecated or decommissioned in accordance with the SAP Concur API Lifecycle & Deprecation Policy.