This all seems to be a bit of a roundabout way to achieve compliance. We require our people to book through Concur or through the corporate TA who uses Concur. Travel booked otherwise isn't reimbursed without significant justification.
Concur itself does not limit what a traveler can book. It simply implements rules set by the employer.