JAGGAER vs Medius

Requirement evaluated: Learning capability: accuracy should improve over time on our specific vendor invoice formats

For a 6-location services company processing 1,800 invoices per month across a mixed PO and non-PO book, JAGGAER offers two distinct layers of invoice capture AI with meaningfully different learning depths. The native Digital Capture module, introduced in release 21.1, combines OCR with machine learning and is described as enabling 'no-touch invoice capture via machine learning' with the ability to 'set confidence thresholds, review key decision factors, and continuously refine AI accuracy' -- but published documentation does not describe a per-supplier adaptive learning mechanism, such as corrections feeding back into a vendor-level recognition profile or supplier-format-specific model retr …

Limitations: JAGGAER's native Digital Capture module does not document a supplier-specific adaptive learning mechanism; the per-vendor accuracy improvement the buyer requires is only evidenced through the AppZen Autonomous AP add-on, which is a separate third-party integration with its own adoption, configuration, and likely pricin …

Requirement evaluated: Learning capability: accuracy should improve over time on our specific vendor invoice formats

For a multi-location services company processing 1,800 invoices per month across a varied vendor mix of facilities, subcontractors, utilities, and subscriptions, Medius addresses this requirement through two named, integrated modules: Medius Capture and SmartFlow. Medius Capture uses OCR, AI, and machine learning to extract header and line-item data from paper and digital invoice formats; <cite index="2-14">Medius Capture has been refining its AI and Machine Learning algorithms since 2016, learning from hundreds of millions of invoices to deliver 100% touchless capture rate.</cite> The learning mechanism operates at the per-vendor level via a confidence-scoring threshold: <cite index="2-16"> …

Limitations: Medius's published learning claims (95% precision, learns after two invoices) are marketing-tier commitments; granular technical documentation on whether AP user corrections explicitly retrain a per-customer model versus operating on aggregate cross-customer patterns was not surfaced in available help-center documentat …

Requirement evaluated: Automated three-way matching: invoice to PO to goods receipt, with configurable tolerance (2% price, 5% quantity)

For this $120M multi-location services company processing 55% PO-based invoices across two Sage Intacct entities, JAGGAER's native matching engine covers all five stages of the pre-processing journey for PO-backed transactions. <cite index="2-1,2-2">JAGGAER's AP module applies configurable 2-, 3-, and n-way matching rules to POs, receipts, and more, with built-in alerts and collaboration tools that streamline exception handling to keep processes moving efficiently.</cite> The tolerance configuration is buyer-administered: <cite index="15-19,15-20">matching configuration options including rules and tolerances are configured at AP Administration > Matching Rules and Tolerances pages.</cite> Th …

Limitations: The official help center documentation confirms percentage-based cost and quantity tolerance configuration but does not explicitly state whether tolerances are enforced at the invoice line-item level versus the invoice header total; given JAGGAER's PO-line architecture this is strongly implied but not definitively conf …

Requirement evaluated: Automated three-way matching: invoice to PO to goods receipt, with configurable tolerance (2% price, 5% quantity)

For this buyer's 55% PO-based invoice volume covering facilities, supplies, and subcontractors, Medius executes automated three-way matching by synchronizing vendor ledgers, purchase order details, and goods receipts from Sage Intacct into the matching engine, then comparing the inbound invoice against all three documents before routing. <cite index="23-8">To enable automated 3-way matching, Medius requires that master data including vendor ledgers, purchase order details, and goods receipts synchronize seamlessly between the ERP system and the AP automation solution.</cite> When all data aligns within applied tolerance levels, the invoice flows touchless to ERP posting without manual review …

Limitations: The goods receipt must originate in Sage Intacct (or be registered there by the receiving team) before the match can execute; if the buyer's receiving staff delays entry of goods receipts into Sage Intacct, invoices will queue in an exception state awaiting the receipt record rather than routing automatically. …

Requirement evaluated: Integration setup assistance included in implementation; not a separate SOW or additional cost

This $120M multi-location services company needs assurance that Sage Intacct integration setup will be handled during implementation without a separate statement of work or added cost. JAGGAER does provide a Professional Services team and a structured implementation methodology covering deployment, project governance, technical consulting, and integration design; and its JAGGAER Link offering includes prebuilt ERP connectors for Oracle, SAP, NetSuite, and Ellucian. However, Sage Intacct is not listed among the named prebuilt connectors in JAGGAER's Connect/Link product. …

Limitations: JAGGAER does not offer a prebuilt Sage Intacct connector; the integration requires client-side build effort and JAGGAER Professional Services engagement that is scoped and priced separately, making it structurally incompatible with the buyer's stated requirement of included, no-extra-cost integration setup assistance.

Requirement evaluated: Integration setup assistance included in implementation; not a separate SOW or additional cost

This buyer runs 2 Sage Intacct entities and needs the connector configuration, field mapping, and go-live setup included in the base implementation fee rather than billed as a separate SOW. Medius does offer a pre-packaged Sage Intacct integration, but the architecture here is materially different from its flagship ERP connectors: <cite index="32-1">Medius has a pre-packaged integration with Sage X3 and Intacct in partnership with Acuity Solutions</cite>, a UK-based Sage specialist, rather than through Medius's own 'fully managed' connector infrastructure that covers SAP, Oracle, NetSuite, Infor, and Microsoft Dynamics. …

Limitations: The Sage Intacct integration is partner-delivered through Acuity Solutions, a UK-only Sage specialist, not a Medius-managed first-party connector. This creates a real risk that integration setup, chart-of-accounts mapping, and multi-entity configuration for this buyer's 2 Intacct entities will be scoped and billed as a …

Requirement evaluated: Unified payment hub supporting ACH, check, wire transfer, and virtual card from a single interface

For a $120M multi-location services company moving off manual email-and-check AP, JAGGAER Pay is the payment execution module embedded within the JAGGAER One source-to-pay suite. Once invoices are approved, JAGGAER Pay can automatically create, batch, and process payments from a single interface, eliminating the need to log into separate banking portals. ACH and virtual card are delivered via two embedded fintech partnerships: Finexio (active since 2022) and Bottomline Paymode (added September 2024), with the latter covering Premium ACH and virtual card on a 600,000-supplier network. …

Limitations: All four required payment methods are present but delivered across multiple embedded partner networks (Finexio, Bottomline Paymode, TransferMate), meaning the buyer must confirm during contracting which rails are active in their tier and whether the check rail specifically is included; JAGGAER's overall platform comple …

Requirement evaluated: Unified payment hub supporting ACH, check, wire transfer, and virtual card from a single interface

For a $120M multi-location services company currently running fragmented bi-weekly check runs and monthly ACH batches through manual bank portals, Medius Payments consolidates all disbursement rails into a single interface. The module, branded as Medius Payments (built on the acquisition of OnPay Solutions and launched as an evolution of Medius Pay), covers all four rails the buyer requires: <cite index="10-1">ACH, check, wire, and virtual card for US-based operations are handled in a single consolidated process for each supplier</cite>, with no need to log into a separate bank portal for ACH transmission. …

Limitations: Wire transfer execution is file-based: Medius formats the wire instruction and transmits it via secure FTP to the client's bank wire desk rather than executing it through a direct real-time bank API, which may introduce a processing lag for urgent wires compared to fully in-bank wire execution. …

Requirement evaluated: SOC 2 Type II certification for the platform

For a $250M technology company with CFO-level compliance scrutiny, JAGGAER meets the SOC 2 Type II bar at the platform level. JAGGAER's own solutions and Procure-to-Pay pages explicitly list 'SOC 2 Type II audited' as a security credential alongside ISO 27001, applying to the JAGGAER One suite. Their dedicated certifications page confirms the SOC 2 report evaluates controls across Security, Availability, and Confidentiality using the AICPA's Trust Services Criteria, and that the report is available on request to prospects who sign an NDA and to existing customers under their agreements. …

Limitations: The publicly available documentation does not enumerate which specific modules are in scope for each SOC 2 audit period; buyers should request the current report under NDA during due diligence to confirm that the procurement modules they intend to deploy (e.g., eProcurement, Supplier Management, Invoicing) …

Requirement evaluated: SOC 2 Type II certification for the platform

For a $250M technology company evaluating Medius as its first formal procurement platform, SOC 2 Type II compliance is directly confirmed. Medius maintains an annual SOC 2 Type 2 report alongside SOC 1 Type 2, SOC 3, and ISO 27001:2022 certifications, all accessible through its dedicated Trust Center at trust.medius.com, powered by SafeBase. The SOC 2 Type 2 report is listed as a private document, meaning your security or IT team can request access (typically via a digital NDA workflow through the Trust Center portal) and receive the full attestation report covering the audit period. …

Limitations: Medius does not publicly specify which product modules are within the SOC 2 Type II audit scope; the buyer should confirm during due diligence that the specific modules they will use (particularly any T&E or sourcing components from post-acquisition integrations) …

Requirement evaluated: Spend dashboards: real-time spend by vendor, category, department, location, and period

For a $250M technology company moving off email-and-Slack purchasing with 35% maverick spend, JAGGAER ONE Spend Analytics delivers multi-dimensional dashboards covering exactly the dimensions the buyer named. The Data Insights module provides an 'aggregated spend view based on different dimensions (category, organization dimensions, geographical coverage and suppliers)' with interactive drill-down, and the platform's primary solutions page explicitly states 'real-time dashboards across S2C, P2P and supplier data — from executive spend summaries to granular PO and contract compliance views.' The Spend Analytics module ingests data from NetSuite (and any other source) …

Limitations: The 65+ pre-built dashboards are powered by Tableau and the Spend Analytics module, which ingests external ERP data (NetSuite in this buyer's case) via scheduled REST API or SFTP feeds rather than a continuous streaming pipeline; at least one published case study references monthly data refresh cycles for legacy-integr …

Requirement evaluated: Spend dashboards: real-time spend by vendor, category, department, location, and period

For a $250M technology company currently flying blind on 35% of its spend, Medius delivers this requirement through its dedicated Medius Analytics module, a separately licensed product that sits alongside AP Automation and Procurement. <cite index="32-1">The module provides "a full, real-time view into how money is spent across your organization delivered through pre-defined reports, dashboards and KPIs,"</cite> with named sub-sections in the product documentation covering AP Insights, Invoice Process Insights, User Insights, and a Procurement Dashboard. …

Limitations: Some dashboard gadgets in Medius Spend Management rely on a scheduled ETL job rather than a live data feed, meaning <cite index="13-4">"displayed data is based on ETL reporting data"</cite> for those panels, which introduces a batch-refresh lag rather than truly instantaneous data. …

Requirement evaluated: Centralized supplier database with self-service onboarding portal: vendors enter their own info, upload W-9, insurance, banking

For a $250M technology company moving away from email-based purchasing and managing 800+ active vendors, JAGGAER's Supplier Management module provides exactly the centralized supplier database and self-service onboarding portal the buyer requires. Vendors receive an invitation and self-register through a dedicated supplier portal: they enter company information, provide tax details, and upload compliance documents without buyer-side manual data entry. …

Limitations: The supplier portal is free to suppliers, but the full Supplier Management and onboarding workflow capabilities sit within JAGGAER's broader source-to-pay platform, so the buyer will need to confirm which specific tier or module covers their required onboarding configuration depth (e.g., custom questionnaires, insuranc …

Requirement evaluated: Centralized supplier database with self-service onboarding portal: vendors enter their own info, upload W-9, insurance, banking

For a $250M technology company currently managing 800+ vendors through email and manual NetSuite entry, Medius delivers this requirement through two integrated, named modules: Medius Supplier Onboarding and the Medius Supplier Portal. The flow is invitation-driven: your team creates and issues onboarding forms inside Medius Supplier Onboarding, and those forms are made available in the Medius Supplier Portal for each vendor to access and complete independently. Suppliers register, record, and update their own details in a single cloud-based location — including banking and contact information — without requiring your AP or ops team to key data on their behalf. …

Limitations: Medius's public documentation confirms banking/payment detail self-service and general regulatory document collection, but does not explicitly name W-9 collection or insurance certificate tracking with expiration alerts as discrete, labeled features — buyers should verify these specific US tax and insurance document wo …

Requirement evaluated: Automatic escalation: if approver has not acted within 48 hours, escalate to their manager with notification

For a $120M multi-location services company moving off manual email-chain approvals, JAGGAER's configurable approval workflow engine handles this requirement within its Invoicing and eProcurement modules. JAGGAER explicitly documents that escalation for stalled approvals is supported alongside delegation, parallel routing, and sequential routing: when an approver has not acted within a defined period, the system automatically escalates and notifies the appropriate next-level approver. …

Limitations: No publicly documented specification for a minimum-configurable timeout interval (e.g., whether 48 hours is a supported threshold or whether the platform enforces a coarser granularity such as 1-day or 2-day increments) was found; the buyer should confirm 48-hour precision during a demo or contract negotiation. …

Requirement evaluated: Segregation of duties enforcement: person who enters cannot approve, person who approves cannot process payment

For a 3-person AP team at a multi-location services company, Medius enforces all three legs of segregation of duties through distinct, system-level mechanisms rather than policy-only controls. First, the `AllowInspectAndAttest` system parameter controls whether the user who reviewed and coded an invoice can also approve it: <cite index="33-15">setting this to 'No' means that a person who has reviewed a coding row can never approve the same row.</cite> Second, Medius includes a configurable Four Eyes Principle (4EP) …

Limitations: All three controls (AllowInspectAndAttest, Four Eyes Principle, Pay Approver Role) are configurable settings that must be deliberately activated during implementation; they are not all enabled out-of-the-box, so the buyer's implementation team must confirm each is turned on and that no threshold-based bypass exists (fo …

Requirement evaluated: Approval bottleneck analysis: which approvers are slowest, which invoice types take longest

For a 3-person AP team currently flying blind on email-chain approvals across 1,800 invoices per month, JAGGAER offers two overlapping mechanisms that address approval bottleneck visibility, but neither delivers the full per-approver, per-invoice-type breakdown the buyer describes. First, the JAGGAER Invoicing module documents 'complete visibility into bottlenecks' alongside exception routing, meaning AP staff can see where invoices are stalled in the approval queue in real time. …

Limitations: The buyer's requirement specifically asks for ranked approver slowness and invoice-type cycle time as structured, reportable dimensions; JAGGAER's documented bottleneck visibility operates primarily at the exception and backlog level through JAI queries and workflow exception routing, not as a named, pre-built approver …

Requirement evaluated: Spend analytics: top vendors, spend by GL category, month-over-month trending

For a $120M multi-location services company running two Sage Intacct entities, Medius addresses this requirement through Medius Analytics, a dedicated reporting module with out-of-the-box dashboards that are automatically available upon deployment. The module delivers a real-time spend analysis view covering cashflow, costs, and forecasts through pre-defined reports, dashboards, and KPIs, with drill-down capability to the individual supplier level for vendor performance monitoring. …

Limitations: Documentation confirms the named dashboards and the supplier- and dimension-level filtering mechanism, but the exact out-of-the-box layout of a 'top vendors' ranked list or an explicit MoM trend chart is not shown in public help articles; buyers should request a live demo of the Cashflow and Overview dashboards to conf …

Requirement evaluated: Vendor performance visibility: on-time payment rate, average payment cycle, dispute frequency

For a $120M multi-location services company running 1,800 invoices per month across two Sage Intacct entities, JAGGAER's relevant mechanism spans three modules rather than a single AP-side vendor performance dashboard. The Spend Analytics module offers the closest match to on-time payment monitoring: <cite index="28-13,28-16">65+ pre-built Tableau dashboards cover spend, savings, supplier, and category performance, and the module explicitly tracks payment-term adherence and off-contract leakage</cite>. …

Limitations: No documented mechanism delivers all three buyer-required metrics (on-time payment rate, average payment cycle, dispute frequency) as calculated, per-vendor historical analytics in a single AP-oriented view; the closest capabilities are spread across Spend Analytics (payment-term adherence), JAGGAER Pay (real-time paym …

Requirement evaluated: Vendor self-service portal: new vendor registration, W-9/W-8 submission, banking detail entry, invoice submission, payment status inquiry

For a $120M services company currently managing vendor onboarding entirely via email and manual data entry into Sage Intacct, Medius offers a dedicated, supplier-only self-service portal that covers all five sub-requirements in the buyer's ask. On the registration and onboarding side, <cite index="4-1,4-13">a dedicated self-serve portal gives suppliers the flexibility to respond to onboarding forms from all of their customers in one place; it is vendor management software that puts the onus on the supplier to onboard and maintain their details in a secure, self-service online portal.</cite> The buyer's AP team creates and issues onboarding forms in Medius Supplier Onboarding; <cite index="24 …

Limitations: Medius's onboarding questionnaires are configurable for document upload including tax forms, but no Medius documentation explicitly confirms a native W-9/W-8 collection workflow with IRS TIN matching or automated validation; buyers with high volumes of subcontractors who need structured, validated tax-form collection s …

Requirement evaluated: PO change order workflow: amendments require re-approval if they exceed original amount by more than 10% or $5,000

For a $250M tech company moving from email/Slack approvals to a governed procurement system, JAGGAER handles PO change orders as a distinct revision document type that routes through the platform's configurable workflow engine. When a PO is amended after initial approval, the revised document enters a separate 'change order' approval path: the JAGGAER help center confirms that approvers work with PO revisions in their 'My Approvals' folders, and that rejecting a revision also voids the original PO, indicating the amendment is treated as a gated re-approval event rather than a silent edit. …

Limitations: The buyer's specific compound OR condition (greater than 10% OR greater than $5,000) must be implemented by JAGGAER's services team at or after go-live, not self-configured by the buyer's admin in a settings UI; this adds a change-management dependency for future threshold adjustments. …

Requirement evaluated: Blanket PO support for contract-based spending with release tracking against the total commitment

For a $250M technology company that currently has no procurement system and 35% maverick spend, Medius offers two overlapping mechanisms that partially address blanket PO needs. First, the Medius I2P platform includes a 'Supplier Contract' document type that supports contract-based invoice matching: incoming invoices can be matched against a stored supplier contract rather than only a standard PO, and the MediusFlow product has included 'Contract Management functionality for 4-way match and real-time follow-up on invoice transactions and invoice plan' since at least 2014. …

Limitations: The specific release-tracking mechanism this buyer needs (each release drawing down a running balance against the parent commitment ceiling, with enforcement before a release is approved) …

Requirement evaluated: Budget data pulled from NetSuite for real-time budget enforcement

For a $250M technology company currently creating POs manually in NetSuite with 35% maverick spend and no upstream budget gate, JAGGAER's eProcurement module within JAGGAER One addresses this requirement by connecting to NetSuite through JAGGAER Link, a prebuilt, standardized connector that JAGGAER documents as enabling real-time data syncing and bidirectional communications across procure-to-pay use cases. Budget enforcement fires at the requisition stage, before a PO is ever created: the platform explicitly commits budget at requisition submission to control spend before PO creation, and routes approvals by value, cost center, and business unit with auto-escalation. …

Limitations: Public documentation does not specify whether JAGGAER queries NetSuite's budget API live at each requisition submission or relies on an event-triggered sync interval, so the buyer should verify in demos that budget balances reflect very-recent commitments (particularly in high-velocity buying periods across the four US …

Requirement evaluated: Approved POs push to NetSuite automatically; payment status syncs back

For a $250M technology company currently creating POs manually in NetSuite, Medius replaces that manual workflow through its 'Built for NetSuite' certified SuiteApp, which extends NetSuite's existing procure-to-pay functionality rather than replacing it. Approved POs created in Medius Procurement flow directly into NetSuite via a cloud-managed connector that Medius maintains; no custom coding or file uploads are required. The integration is bi-directional: vendor master data, PO lines, and goods receipt data sync from NetSuite into Medius, and once an invoice clears the Medius approval and matching workflow, the posting (preliminary, cancel, and final) writes back to NetSuite automatically. …

Limitations: The depth of PO-line data flowing into the connector depends on the NetSuite integration package version in use; buyers should verify that the connector imports PO lines before goods receipts are confirmed, which is a configuration requirement Medius documents for its goods-receipt deviation routing feature. …

Requirement evaluated: Automatic match-and-pass for invoices within tolerance, reducing AP workload to exceptions-only review

For a $250M technology company moving from email-and-Slack approvals to systematic AP automation, JAGGAER's Invoicing module (part of the JAGGAER One platform) delivers the full three-way matching and auto-pass workflow this buyer needs. Invoices arrive via portal, EDI, cXML, OCR, or PEPPOL and are standardized into structured fields; the system then compares each invoice against its PO and goods receipt using 2-way, 3-way, or n-way matching with configurable price and quantity tolerance bands set by the organization. …

Limitations: Tolerance band configuration and invoicing workflow setup are performed during implementation by JAGGAER's team rather than being fully self-service for the buyer's admin; changes to matching rules typically require coordination with JAGGAER support or a project manager, which may slow iteration as the buyer's process …

Requirement evaluated: Automated three-way matching: PO to receipt to invoice with configurable tolerance (2% price, 5% quantity)

For a $250M technology company coming from a fully manual, email-based process, Medius delivers automated three-way matching as a core capability of its AP Automation module. When an invoice arrives, Medius's AI-powered capture extracts line-item data (vendor name, PO number, quantities, unit prices) and automatically connects it to the corresponding purchase order and goods receipt (GDR) already synced from NetSuite. …

Limitations: Medius relies on goods receipt data being registered and synced from NetSuite into Medius for the third leg of the match; since this buyer currently has no receiving process or system discipline, the ops team will need to establish a goods receipt confirmation workflow in NetSuite before three-way matching can operate …

Requirement evaluated: Punchout catalog integration with Amazon Business and CDW

Your team currently has no guardrails stopping employees from buying outside approved channels, which drives the 35% maverick spend figure your CFO identified. JAGGAER's eProcurement module addresses this directly through cXML-based punchout catalog integration, which is its primary and documented standard for supplier catalog connectivity. When a buyer clicks a punchout link inside JAGGAER, the platform sends a cXML PunchOutSetupRequest to the supplier; the supplier authenticates the session and opens its live storefront; the buyer shops natively (seeing real-time pricing, inventory, and any contract-negotiated rates); and the completed cart is returned to JAGGAER via a cXML PunchOutOrderMe …

Limitations: While Amazon Business has a named, co-branded integration page with JAGGAER, CDW punchout connectivity was not confirmed via a dedicated JAGGAER-CDW co-branded document; CDW's punchout enablement relies on the same cXML standard that JAGGAER fully supports, but the buyer should confirm CDW's current enrollment status i …

Requirement evaluated: Services catalog: pre-defined service offerings from preferred vendors (e.g., standard consulting day rates)

For a $250M technology company dealing with 35% maverick spend and no formal catalog discipline, Medius Procurement delivers an internal catalog mechanism that directly addresses this requirement. Administrators load approved goods and services items into an internal catalog with negotiated pricing tied to preferred vendors; end users then search and browse that catalog using a consumer-style shopping experience to create requisitions rather than free-texting requests. …

Limitations: The Medius Procurement module is a separately priced add-on; the core AP automation product in the fact sheet does not include catalog buying. Specific documentation on time-and-materials billing units (e.g., per-day, per-hour unit-of-measure configuration for service line types) …

Requirement evaluated: Automatic routing to the right approver based on category, amount, department, and location

For a $250M tech company currently routing nothing automatically (approvals happen via Slack and email), JAGGAER's eProcurement module fires its configurable approval workflow engine at the purchase requisition stage -- before a PO is ever created -- which directly cuts off the maverick spend path the buyer's CFO identified. <cite index="1-1">Approval workflows in JAGGAER route purchase requisitions and orders to the right approvers based on rules you define: spend amount, department, supplier, commodity category, or any combination.</cite> All four of the buyer's required routing dimensions are explicitly covered: <cite index="12-16">approval routing by value, commodity, BU, and cost center …

Limitations: Separate-per-BU workflow routing requires JAGGAER to enable the Multiple Business Unit feature during implementation -- it is not self-serve out of the box -- so the buyer should confirm this is scoped into their implementation engagement for all five locations. …

Requirement evaluated: Mobile submission capability; our field team needs to submit requests from job sites

This buyer's field team needs to originate purchase requisitions from job sites, which requires mobile PR creation, not just mobile approval. Medius's documented mobile capability centers on a responsive web interface (no native app required) that allows users to access and act on documents from any HTML-compliant browser on phones or tablets. <cite index="35-1,35-2,35-3">Medius's responsive web design supports consistent use across PCs, laptops, tablets, and mobile devices with no app to download, and the mobile-friendly interface allows users to access, authorize, and comment on documents.</cite> However, every mobile-specific reference found is approval-centric: <cite index="16-1,16-5">Me …

Limitations: The material ceiling for this buyer is that Medius's mobile capability is structured around approver workflows (reviewing and approving invoices and requisitions in queue), not around field-side requisition origination. …

Requirement evaluated: SSO integration with Microsoft Azure AD

For a multi-location services company whose AP team and internal approvers authenticate via Microsoft Azure AD, JAGGAER ONE supports federated SSO by accepting Azure AD (Microsoft Entra ID) as an external identity provider. <cite index="10-2">JAGGAER ONE allows organizations to integrate their own identity provider via standardized authentication protocols: SAML or OpenID Connect, for seamless single sign-on to the JAGGAER solution.</cite> At the configuration level, the buyer's IT administrator registers JAGGAER as an enterprise application in Azure AD and exchanges metadata; JAGGAER then acts as the SAML/OIDC service provider (SP), deferring all credential validation to Azure AD. …

Limitations: Only SP-initiated SSO is supported, meaning users must navigate to the JAGGAER URL first rather than launching it from the Azure AD MyApps portal tile, which is a minor UX gap but does not affect centralized identity governance. …

Requirement evaluated: Data encryption at rest and in transit

For a $120M multi-location services company handling invoice data, vendor credentials, and payment information across two Sage Intacct entities, Medius provides encryption controls at both the storage and transmission layers. On the storage side, Medius explicitly documents AES-256 encryption across its infrastructure, which is hosted in Microsoft Azure data centers with customer data separated into unique SQL databases per customer. On the transmission side, Medius's Trust Center confirms that Transport Layer Security (TLS) …

Limitations: Medius's publicly accessible Trust Center pages confirm AES-256 and TLS but do not enumerate the specific TLS version floor (1.2 vs. 1.3) in free-text form; buyers with contractual requirements for a minimum TLS version should request the full SOC 2 Type 2 report and Qualys detail from trust.medius.com to confirm. …