API Release Notes, September 2026

New This Month

Deprecation of Latest Bookings and Opportunities

Effective September 14, 2026, the Latest Bookings and Opportunities APIs are deprecated. Decommission will follow.

New Client SSL Certificate for *.api.concursolutions.com

SAP Concur will renew the security certificate for *.api.concursolutions.com on November 10, 2026. In most cases, certificate renewal is automatic and transparent, and no action is required.

This renewal is part of SAP Concur’s preparation for the upcoming DigiCert Global Root G5 migration (April 2027). As part of the renewal, the Client Authentication extended key usage will be removed from this certificate. This extension is not used on this certificate, and its removal has no impact on service functionality.

Important: Due to industry-wide changes to maximum certificate validity periods — reducing to 199 days in 2026 and 47 days in 2029 — SAP Concur will no longer be able to provide advance announcements for certificate renewals. Certificates will be rotated more frequently and automatically. Changes to Intermediate or Root CA certificates will still be announced in advance.

SAP Concur will issue the new certificate on the following schedule:

Note: Root and Intermediate certificates remain the same for this renewal. The root certificate will change to DigiCert Global Root G5 in April 2027. See the DigiCert Global Root G5 Migration section below for details.

Certificate Pinning Guidance

Clients who have not pinned the expiring certificate do not need to take any action. Most clients do not pin the certificate.

Note: Certificate pinning is not recommended. If your implementation requires certificate pinning, pin the Intermediate or Root CA certificate instead of the leaf/end-entity certificate. Pinning the leaf certificate will result in frequent service disruptions as renewal cycles become shorter. If you are unable to migrate to pinning the Intermediate or Root CA certificate, contact SAP Concur Support before November 10, 2026.

DigiCert Global Root G5 Migration

DigiCert is transitioning its certificate chain to the DigiCert Global Root G5. SAP Concur will migrate all public certificates to G5 starting April 2027. Clients who pin certificates must add the new root certificates to their trust stores before the migration date:

• RSA: DigiCert TLS RSA4096 Root G5
• ECC/ECDSA: DigiCert TLS ECC P384 Root G5

For full details, including certificate download links and feature activation, refer to the Concur Shared Release Notes: SSL Certificates Renewal for *.api.concursolutions.com.

Now Available: Hotel Service v4 — Traveler Title Field

A new field has been added to the Hotel Service v4 reservation request that allows the traveler’s title to be sent when present in their profile. The new field is part of the guests array:

"guests": [
    {
      "firstname": "Blake",
      "middleName": "Jordan",
      "lastname": "Smith",
      "title": "Mister",
      "address": {
        "addressLines": [
          "910 Mainland Street"
        ]
      }
    }
  ]

Ongoing

New Client SSL Certificate for ESS webhook.api.concursolutions.com

In an effort to ensure the ongoing security of our products and services, on September 24, 2026, ESS will be issuing a new webhook.api.concursolutions.com SSL certificate. We will always use the same client x509 certificate with the following subject: C=DE, ST=Baden-Württemberg, L=Walldorf, O=SAP SE, CN=webhook.api.concursolutions.com.

All details will be published in the Event Subscription Service v4 documentation soon.

Important! Upcoming Shutdown of Request V1, V3, and V3.1

Updated Effective Date: November 3, 2026

As previously announced, the Concur Request APIs v1.0, v3.0, and v3.1 have been decommissioned. These versions will be retired and no longer accessible as of November 3, 2026. Customers currently using these versions must migrate to the successor API, Request API V4, to ensure uninterrupted functionality. Please reach out to your Concur representative for more information.

Previews

In general, this table lists items that will be shipping in the next 30-60 days. For a broader view of features that are coming, please see our Road Map Explorer.

Deprecations and Decommissions

APIs are being deprecated or decommissioned in accordance with the SAP Concur API Lifecycle & Deprecation Policy.