Technology Blogs by SAP
Learn how to extend and personalize SAP applications. Follow the SAP technology blog for insights into SAP BTP, ABAP, SAP Analytics Cloud, SAP HANA, and more.
cancel
Showing results for 
Search instead for 
Did you mean: 
Smrithi_Jayaraj
Associate
Associate
0 Kudos

What is the ' Sign in with an Email link/ Passwordless Sign-In ' feature?

Overview

This feature allows a user to enter their username or verified email address in https://www.concursolutions.com/  and then at the next step,  see an option that says ' Sign in with an email link'. The user then receives an email with a one-time link to sign in to Concur.  We can also call the ' Sign in without a password' feature as 'Passwordless Sign In'.

Key Benefits

 

  1. Improved User Experience: Passwordless login streamlines the authentication process, leading to a smoother and more efficient user experience. Users no longer need to type in passwords or go through the hassle of resetting forgotten passwords.
  2. Elimination of Password Management Hassles: Users don't need to remember complex passwords or worry about password resets.
  3. Does not compromise on security: Since the one-time link has an expiry time of 1 hour and is sent only to the user's email address, it does not compromise on security unless the user's email has been hacked
  4. Reduces need to create Support cases when the account gets locked: If you are unsure of your password, use the passwordless sign-in option instead of attempting multiple password entries and locking your account
  5. Alternative to 2FA: If you are stuck during the 2FA registration or login flow ( getting an incorrect 6 digit code error), login quickly using the passwordless login feature to sign into Concur

Overall, passwordless login features, particularly those leveraging one-time email links, offer secure, user-friendly, and efficient authentication solutions for both businesses and users alike.

How it works

Once the feature is released in Q2 2024 (The exact date will be updated)

  1. Go to https://www.concursolutions.com/
  2. Enter the username or verified email address
    Smrithi_Jayaraj_1-1714448165657.png

    3.  You will see an option to ' Sign in with an email link'

    Smrithi_Jayaraj_2-1714448209030.png

    4.  If you click Sign in with an Email Link, a sign-in link is sent to the Email 1 and/or
    Email 2 email address ( Note: These email addresses need NOT be verified. ) configured in the Email Addresses section of the My Profile
    – Personal Information page in SAP Concur Solutions. If neither Email1 nor Email2 exists, and the username is of email address format, we'll try to send the email to that address. 

    Smrithi_Jayaraj_0-1714499477274.png

    Configuration Settings - For Admins

     

    • Works for both Standard and Professional edition 
    • The feature will be automatically turned on for companies that have SSO optional setting.
      • To check if you have SSO optional setting, the Company's SSO Admin should navigate to Authentication Admin → Manage SSO → Check the SSO Setting
        Smrithi_Jayaraj_1-1714499536467.png

        For SSO optional companies, any user who enters their username and navigates to the next page will see an option called ' Sign in with an Email link'

      • If you want to disable the 'Passwordless Login' feature for all users in your company

        • Go to Authentication Admin
        • Navigate to Sign In Settings
        • Navigate to Others- Miscellaneous Policies
        • Disable the checkbox for the policy "Allow users to sign in using an email link"
        • We cannot disable this feature per user/group of users

     Pre- Requisites

  • SSO Required companies will have the feature disabled by default, but they can enable it manually if they choose
  • .Feature is automatically enabled for SSO Optional companies.
  • This feature is NOT available on Mobile device login or Concur Mobile App sign-in. Works only for web browser sign-in.
  • User should have a working email address configured in Email 1/ Email 2 under Profile settings. Users who do not have access to the Email Addresses section of the My Profile –
    Personal Information page—for example, invoice-only users—must have a valid email address associated with their user account. The email address associated with their account can be confirmed by their company’s Concur user administrator.