You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/blobs/secure-file-transfer-protocol-support-entra-id-based-access.md
+13-10Lines changed: 13 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,8 @@ ms.author: normesta
7
7
---
8
8
Getting started - Entra ID based access for Azure Blob Storage SFTP
9
9
10
-
**This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription. This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription. **
10
+
> [!NOTE]
11
+
> This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription. This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription.
11
12
12
13
Azure Blob Storage SFTP now supports Entra ID-based access in public preview. Previously, Azure Blob Storage SFTP only supported local user-based access, requiring either a password or an SSH private key for authentication. With this new feature, users can leverage their Entra ID or Entra External Identities to connect to Azure storage accounts via SFTP without the need to create and maintain local users.
13
14
@@ -19,7 +20,7 @@ Entra ID-based access brings a host of benefits, including Role Based Access Con
19
20
20
21
With Entra ID-based access, there is no need to create, rotate, or maintain local SFTP users per storage account. Authentication is handled entirely by Entra ID, significantly reducing operational overhead and configuration sprawl
21
22
22
-
1.Enterprisegrade Identity & Security
23
+
1.Enterprise grade Identity & Security
23
24
24
25
SFTP access is backed by Entra ID, enabling:
25
26
@@ -63,8 +64,7 @@ Below is a high-level overview of the key steps involved in this process. In sum
63
64
> [!NOTE]
64
65
> For Step 3 Password based authentication won't be supported since there are no SFTP clients that have native Entra ID integration to allow an Entra ID UX to accept the passwords.
65
66
66
-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/overview-flow-chart.png" alt-text="Flow chart demonstrating the Open SSH certificate workflow":::
67
-
67
+
> 
68
68
69
69
70
70
# **Connecting to Azure Blob Storage with Entra IDs **
@@ -210,7 +210,7 @@ Use the following command to view the OpenSSH certificate.
210
210
`ssh-keygen -L -f my_cert.pub`
211
211
Username is captured in the _Principals_ section highlighted in red
212
212
213
-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/verify-opensshcert.jpg" alt-text="Screenshot of the OpenSSH certificate output showing the Principals section highlighted in red.":::
213
+
> 
214
214
215
215
For security reasons, the OpenSSH certificate is valid for 65 minutes. After this period, you will need to request a new certificate to initiate any further transactions. For security reasons, the OpenSSH certificate is valid for 65 minutes. After this period, you will need to request a new certificate to initiate any further transactions.
216
216
@@ -246,15 +246,18 @@ OpenSSH based login is supported by SFTP clients such as WinSCP and PuTTY. Steps
246
246
2. Obtain the OpenSSH certificate from step 3 above (3. Generate OpenSSH certificate)
247
247
3. In WinSCP enter the Host name Username and click on Advanced
248
248
249
-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/winscp-login.png" alt-text="Screenshot of the WinSCP login dialog showing the Host name, Username fields, and the Advanced button.":::
249
+
> 
250
+
251
+
252
+
4. Navigate to the Authentication section in the SSH Tab on the left and attach the Private Key and Certificate files obtained from the earlier sections and Click 'Ok.'
253
+
254
+
> 
250
255
251
-
1. Navigate to the Authentication section in the SSH Tab on the left and attach the Private Key and Certificate files obtained from the earlier sections and Click 'Ok.'
252
256
253
-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/winscp-advanced-settings.png" alt-text="Screenshot of the WinSCP Advanced Site Settings dialog showing the Authentication section with Private Key and Certificate file fields.":::
257
+
5. Click 'Login' to Login with the Entra ID account and OpenSSH certificate
254
258
255
-
1. Click 'Login' to Login with the Entra ID account and OpenSSH certificate
259
+
> 
256
260
257
-
:::image type="content" ssource="media/secure-file-transfer-protocol-support-entra-id-based-access/winscp-login-highlight.png" alt-text="Screenshot of the WinSCP login dialog with the Login button to connect using the Entra ID account and OpenSSH certificate.":::
0 commit comments