Merge pull request #312245 from jeevanbalanmanoj/patch-21

Document Entra ID access for Azure Blob Storage SFTP

Author: Carolyn135

articles/storage/blobs/TOC.yml

@@ -232,6 +232,8 @@ items:
                 href: secure-file-transfer-protocol-support-how-to.md
               - name: Authorize access
                 href: secure-file-transfer-protocol-support-authorize-access.md
+              - name: Authorize access with Microsoft Entra ID (preview)
+                href: secure-file-transfer-protocol-support-entra-id-based-access.md
               - name: Connect from an SFTP client
                 href: secure-file-transfer-protocol-support-connect.md
               - name: Performance considerations

articles/storage/blobs/media/secure-file-transfer-protocol-support/advanced-settings.png

@@ -6,7 +6,7 @@ author: normesta
 
 ms.service: azure-blob-storage
 ms.topic: concept-article
-ms.date: 11/15/2024
+ms.date: 02/26/2026
 ms.custom: references_regions
 ms.author: normesta
 
@@ -43,16 +43,15 @@ Different protocols are supported by the hierarchical namespace. SFTP is one of
 
 ## SFTP permission model
 
-SFTP clients can't be authorized by using Microsoft Entra identities. Instead, SFTP utilizes a new form of identity management called _local users_.
+> [!TIP]
+> The ability to use Microsoft Entra ID to authorize SFTP transfers is currently now in public preview. To learn more about configuring entra-id based access, see  [Authorize SSH File Transfer Protocol (SFTP) access to blobs using Microsoft Entra ID](secure-file-transfer-protocol-support-entra-id-based-access.md).
+
+SFTP utilizes a new form of identity management called _local users_.
 
 Local users must use either a password or a Secure Shell (SSH) private key credential for authentication. You can have a maximum of 25,000 local users for a storage account.
 
 To set up access permissions, you create a local user, and choose authentication methods. Then, for each container in your account, you can specify the level of access you want to give that user.
 
-> [!IMPORTANT]
-> If you have any feedback on scenarios that require Entra Identities-based authorization, please reach out to us at [email protected].
->
-
 > [!CAUTION]
 > Local users do not interoperate with other Azure Storage permission models such as RBAC (role based access control) and ABAC (attribute based access control). Access control lists (ACLs) are supported for local users.
 >