SFTP settings for users

Whether SFTP is enabled for users is specified by Settings - Configuration - SFTP server - Users have SFTP access to packages.

For every user the SFTP configuration allows to set:

Public SSH keys

List of public SSH keys formatted as in OpenSSH file authorized_keys (e.g. "ssh-rsa AAAAB3NzaC1y..."). Each key must be on a separate line.

A user can use any of these keys to log in to SFTP, eliminating the need for a traditional password.

If we want to prevent the user from using a password altogether and require them to use a key, we can set an empty (= inactive) password. In this case, the password cannot be used for authentication, but this restriction also applies to the web interface. This applies only to local accounts with local passwords, not to remote accounts, which do not have passwords in the application. Alternatively, password authentication is also disabled if the user enables multi-factor authentication, as this cannot be performed via the SFTP protocol. In such cases, authentication is only possible using a key.

Default package

The Package (its UUID) opened in SFTP connection if package ID is not present in username (e.g. "document-exchange@sofie.cloud#bbab84c5-aec8-4716-a41c-98c0a58c96c9").