Users management

SFTPPlus MFT provides a complete user management system that supports both internal and external authentication sources. This flexibility allows organizations to manage user access efficiently, integrate with existing identity systems, and maintain strong access control across file transfer services.

User Types ​

SFTPPlus supports two main user types:

  1. Application users – managed directly within the SFTPPlus configuration.
  2. Operating system users – accounts defined in the host operating system, including local and domain users.

Using operating system users simplifies migration from legacy systems. Existing credentials can continue to be used without requiring password resets or account changes, while users gain access to modern file transfer services such as SFTP, FTPS, and the Web Interface.

Embedded User and Group Management ​

SFTPPlus includes an embedded identity management component that allows administrators to define users and groups, with each user being a member of one or multiple groups. Configuration options can be defined at the user level or inherited from the group level, simplifying account management across large deployments.

User management can be performed through:

  • The web management interface
  • APIs for automation
  • Command-line tools
  • Direct editing of .INI configuration files

External Authentication Integration ​

Beyond the built-in user management, SFTPPlus can delegate authentication to external identity providers, including:

  • Active Directory
  • LDAP
  • RADIUS
  • OAuth / OpenID Connect providers such as Microsoft Entra ID, Okta, and Google Identity

SFTPPlus also supports integration with custom HTTP-based microservices, allowing it to connect with proprietary or third-party user management systems.

Authentication Methods and Security Policies ​

SFTPPlus supports multiple authentication methods that can be used individually or combined for multi-factor authentication (MFA):

  • Username and password
  • SSH public keys
  • TLS client certificates
  • TOTP one-time codes

Advanced security options include:

  • Source IP restrictions
  • Password policies for complexity, length, reuse, and expiration
  • Automatic suspension of inactive accounts
  • Configurable session time limits

These controls help maintain consistent access governance and reduce unauthorized access risks.

Audit and Monitoring ​

All user activities, including authentication attempts and session details, are fully recorded in the SFTPPlus audit log. Each log entry includes information such as:

  • The credentials used (e.g., password, SSH key, certificate)
  • Source IP address
  • Protocol used (SFTP, FTPS, HTTPS, etc.)

This audit trail supports compliance, monitoring, and security investigations.

Key Benefits ​

  • Flexible identity model: Support for both internal and operating system users.
  • Seamless integration: Connects with common enterprise identity systems and custom APIs.
  • Strong authentication: Supports multiple and combined authentication methods, including MFA.
  • Centralized management: Manage users and groups from the web interface, command line, or API.
  • Comprehensive auditing: Tracks all user activity for compliance and traceability.