Skip to content

Commit eeb1076

Browse files
committed
Fixing more validation issues
1 parent 0d556e7 commit eeb1076

5 files changed

Lines changed: 8 additions & 7 deletions

File tree

articles/storage/blobs/media/secure-file-transfer-protocol-support/winscp-advanced-settings.png renamed to articles/storage/blobs/media/secure-file-transfer-protocol-support/advanced-settings.png

File renamed without changes.

articles/storage/blobs/media/secure-file-transfer-protocol-support/winscp-login-highlight.png renamed to articles/storage/blobs/media/secure-file-transfer-protocol-support/login-button.png

File renamed without changes.

articles/storage/blobs/media/secure-file-transfer-protocol-support/winscp-login.png renamed to articles/storage/blobs/media/secure-file-transfer-protocol-support/login-dialog.png

File renamed without changes.

articles/storage/blobs/media/secure-file-transfer-protocol-support/verify-opensshcert.png renamed to articles/storage/blobs/media/secure-file-transfer-protocol-support/verify-certificate.png

File renamed without changes.

articles/storage/blobs/secure-file-transfer-protocol-support-entra-id-based-access.md

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
---
22
title: Authorize SFTP access to blobs using Microsoft Entra ID (preview)
33
titleSuffix: Azure Storage
4+
description: Learn how to authorize SSH File Transfer Protocol (SFTP) access to blobs by using Microsoft Entra ID.
45
author: jeevanbalanmanoj
56
ms.date: 02/24/2026
67
ms.topic: how-to
@@ -225,7 +226,7 @@ Use the following command to view the OpenSSH certificate:
225226

226227
The _Principals_ section contains the username:
227228

228-
:::image type="content" source="./media/secure-file-transfer-protocol-support/verify-opensshcert.png" alt-text="Screenshot of the principals section in the command ouput.":::
229+
:::image type="content" source="./media/secure-file-transfer-protocol-support/verify-certificate.png" alt-text="Screenshot of the principals section in the command ouput.":::
229230

230231
For security reasons, the OpenSSH certificate is valid for 65 minutes. After this period, you need to request a new certificate to initiate any further transactions.
231232

@@ -262,15 +263,15 @@ SFTP clients such as WinSCP and PuTTY support OpenSSH-based authentication. The
262263
1. Obtain the OpenSSH certificate from the previous step (Generate OpenSSH certificate)
263264
1. In WinSCP, enter the Host name and Username, and then select **Advanced**
264265

265-
:::image type="content" source="./media/secure-file-transfer-protocol-support/winscp-login.png" alt-text="Screenshot of of the Login window and the Advanced option.":::
266+
:::image type="content" source="./media/secure-file-transfer-protocol-support/login-dialog.png" alt-text="Screenshot of of the Login window and the Advanced option.":::
266267

267268
1. In the SSH tab, go to the Authentication section. Attach the private key and certificate files obtained from the previous sections, and then select **OK**.
268269

269-
:::image type="content" source="./media/secure-file-transfer-protocol-support/winscp-advanced-settings.png" alt-text="Screenshot of the Authentication settings in the Advanced Site Settings dialog box.":::
270+
:::image type="content" source="./media/secure-file-transfer-protocol-support/advanced-settings.png" alt-text="Screenshot of the Authentication settings in the Advanced Site Settings dialog box.":::
270271

271272
1. Select **Login** to sign in by using the Microsoft Entra ID account and OpenSSH certificate.
272273

273-
:::image type="content" source="./media/secure-file-transfer-protocol-support/winscp-login-highlight.png" alt-text="Screenshot Login dialog box.":::
274+
:::image type="content" source="./media/secure-file-transfer-protocol-support/login-button.png" alt-text="Screenshot Login dialog box.":::
274275

275276
##### [Azure CLI](#tab/azurecli)
276277

@@ -364,9 +365,9 @@ An `Access denied` error can happen even if you're able to connect to storage ac
364365

365366
This error can happen because WinSCP automatically tries to **canonicalize every directory** it enters. That means that for _every_ `cd` or directory listing, it sends one or more extra protocol requests to figure out the "true" absolute path.
366367

367-
- The **root directory** shows _containers_.
368-
- Each container acts as **a virtual chroot**. Once you're inside it, you can't go above or outside it.
369-
- Paths are **virtual**, not physical. Azure doesn't support `/`-based absolute traversal above containers.
368+
- The **root directory** shows _containers_.
369+
- Each container acts as **a virtual chroot**. Once you're inside it, you can't go above or outside it.
370+
- Paths are **virtual**, not physical. Azure doesn't support `/`-based absolute traversal above containers.
370371

371372
Resolve this problem by using one of the following options:
372373

0 commit comments

Comments
 (0)