SFTPPlus version 5.16.0 is now available.

This release focuses on tightening SSH key-based access policies, extending SharePoint Online cloud integration, and improving content validation and reliability.

Highlights ​

• Enforce SSH public key algorithms: the SFTP server can now restrict accepted key algorithms via ssh_cipher_list, closing the gap where any algorithm was previously accepted.
• SharePoint Online integration: a new location type using OAuth2 with the Microsoft Graph API simplifies managed file workflows with Microsoft 365.
• Content validation: new content-check event handler replaces and expands the former file-digest handler, letting you assert presence or absence of specific content.
• Custom HTTP User-Agent: define User-Agent for HTTP event handlers and HTTP authentication methods, improving traceability and compatibility.
• Stronger RSA key interoperability: SFTP locations can authenticate with servers that disable legacy ssh-rsa and only allow rsa-sha2-256 / rsa-sha2-512.
• More resilient Purview extension: automatic retries with configurable sdk_timeout, retry_count, and retry_wait, plus an increased default timeout (now 10 minutes).

Security ​

Administrators can now explicitly align allowed SSH public key algorithms with organizational policies or compliance baselines, reducing unintended acceptance of weaker or undesired algorithms.

Cloud & Integration ​

SharePoint Online support (Graph API + OAuth2) broadens hybrid and cloud transfer options, allowing direct SharePoint document library ingress/egress inside standard SFTPPlus transfer definitions.

Event Handling & Validation ​

content-check unifies and extends digest-oriented functionality so you can declare required markers or patterns, or ensure prohibited content is not present, during automated handling chains.

Thank you ​

Thank you to all customers providing feedback and reporting issues. Your input drives ongoing improvements. For upgrade guidance contact our support team.

You can review the full release notes here.