SFTPPlus Users
Embedded User Authentication
SFTPPlus MFT provides a built-in user management system for authenticating users. This system, which handles "application users," operates independently of any external authentication services. Application users can be used across all supported file transfer protocols, including SFTP, FTP, HTTPS, and AS2.
Authentication Methods
Application users can be authenticated using several methods:
Password Authentication: The simplest method, relying on a username and a corresponding password. This method is standard across most protocols.
SSH Key Authentication: For SFTP and SCP, users can be authenticated using SSH keys. This method provides a more secure alternative to passwords by using a public/private key pair. The user's public key is stored on the server, while the private key remains with the user.
TLS Certificate Authentication: Used with protocols like FTPS and HTTPS, this method validates the user's identity through a client-side TLS certificate. The server verifies the certificate's validity and the user's identity based on the certificate details.
TOTP Multi-Factor Authentication (MFA): This method adds an extra layer of security. After providing their primary credential (e.g., password), users must also supply a one-time passcode generated by a Time-based One-Time Password (TOTP) application. This second factor is required for successful authentication.
Application and Administrator Users
The embedded authentication system is not limited to file transfer users. It can also be used to authenticate administrator users who manage the SFTPPlus MFT server. This dual functionality allows for a unified approach to user management, securing both data transfer operations and administrative access within the same platform.
Get in touch with our experts
For a secure and functional implementation of user authentication, contact our support team.
With over 20 years of experience, our team has assisted customers with implementing secure transfers and migrating users from legacy systems.
We provide guidance on transitioning from users managed by operating systems or LDAP to stand-alone application users or cloud-based SSO systems.
Get in touch with us to configure your SFTPPlus MFT solution for your specific requirements.
