Skip to content

Commit a22f626

Browse files
Revise Entra ID-based access documentation for SFTP
Updated the documentation for Entra ID-based access for Azure Blob Storage SFTP, including clarifications and formatting changes.
1 parent ef2b05d commit a22f626

1 file changed

Lines changed: 13 additions & 10 deletions

File tree

articles/storage/blobs/secure-file-transfer-protocol-support-entra-id-based-access.md

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,8 @@ ms.author: normesta
77
---
88
Getting started - Entra ID based access for Azure Blob Storage SFTP
99

10-
**This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription. This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription. **
10+
> [!NOTE]
11+
> This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription. This feature is currently in public preview and once enabled it is applicable across all storage accounts within the entire subscription.
1112
1213
Azure Blob Storage SFTP now supports Entra ID-based access in public preview. Previously, Azure Blob Storage SFTP only supported local user-based access, requiring either a password or an SSH private key for authentication. With this new feature, users can leverage their Entra ID or Entra External Identities to connect to Azure storage accounts via SFTP without the need to create and maintain local users.
1314

@@ -19,7 +20,7 @@ Entra ID-based access brings a host of benefits, including Role Based Access Con
1920

2021
With Entra ID-based access, there is no need to create, rotate, or maintain local SFTP users per storage account. Authentication is handled entirely by Entra ID, significantly reducing operational overhead and configuration sprawl
2122

22-
1. Enterprisegrade Identity & Security
23+
1. Enterprise grade Identity & Security
2324

2425
SFTP access is backed by Entra ID, enabling:
2526

@@ -63,8 +64,7 @@ Below is a high-level overview of the key steps involved in this process. In sum
6364
> [!NOTE]
6465
> For Step 3 Password based authentication won't be supported since there are no SFTP clients that have native Entra ID integration to allow an Entra ID UX to accept the passwords.
6566
66-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/overview-flow-chart.png" alt-text="Flow chart demonstrating the Open SSH certificate workflow":::
67-
67+
> ![Screenshot of the disable SFTP button.](./media/secure-file-transfer-protocol-support/overview-flow-chart.png)
6868
6969

7070
# **Connecting to Azure Blob Storage with Entra IDs **
@@ -210,7 +210,7 @@ Use the following command to view the OpenSSH certificate.
210210
`ssh-keygen -L -f my_cert.pub`
211211
Username is captured in the _Principals_ section highlighted in red
212212

213-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/verify-opensshcert.jpg" alt-text="Screenshot of the OpenSSH certificate output showing the Principals section highlighted in red.":::
213+
> ![Screenshot of the disable SFTP button.](./media/secure-file-transfer-protocol-support/verify-opensshcert.jpg)
214214
215215
For security reasons, the OpenSSH certificate is valid for 65 minutes. After this period, you will need to request a new certificate to initiate any further transactions. For security reasons, the OpenSSH certificate is valid for 65 minutes. After this period, you will need to request a new certificate to initiate any further transactions.
216216

@@ -246,15 +246,18 @@ OpenSSH based login is supported by SFTP clients such as WinSCP and PuTTY. Steps
246246
2. Obtain the OpenSSH certificate from step 3 above (3. Generate OpenSSH certificate)
247247
3. In WinSCP enter the Host name Username and click on Advanced
248248

249-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/winscp-login.png" alt-text="Screenshot of the WinSCP login dialog showing the Host name, Username fields, and the Advanced button.":::
249+
> ![Screenshot of the disable SFTP button.](./media/secure-file-transfer-protocol-support/winscp-login.png)
250+
251+
252+
4. Navigate to the Authentication section in the SSH Tab on the left and attach the Private Key and Certificate files obtained from the earlier sections and Click 'Ok.'
253+
254+
> ![Screenshot of the disable SFTP button.](./media/secure-file-transfer-protocol-support/winscp-advanced-settings.png)
250255
251-
1. Navigate to the Authentication section in the SSH Tab on the left and attach the Private Key and Certificate files obtained from the earlier sections and Click 'Ok.'
252256

253-
:::image type="content" source="media/secure-file-transfer-protocol-support-entra-id-based-access/winscp-advanced-settings.png" alt-text="Screenshot of the WinSCP Advanced Site Settings dialog showing the Authentication section with Private Key and Certificate file fields.":::
257+
5. Click 'Login' to Login with the Entra ID account and OpenSSH certificate
254258

255-
1. Click 'Login' to Login with the Entra ID account and OpenSSH certificate
259+
> ![Screenshot of the disable SFTP button.](./media/secure-file-transfer-protocol-support/winscp-login-highlight.png)
256260
257-
:::image type="content" ssource="media/secure-file-transfer-protocol-support-entra-id-based-access/winscp-login-highlight.png" alt-text="Screenshot of the WinSCP login dialog with the Login button to connect using the Entra ID account and OpenSSH certificate.":::
258261

259262
# [Azure CLI](#tab/azurecli)
260263

0 commit comments

Comments
 (0)