Setting Up Credentials for SFTP Actions

File-sharing actions can pass files securely to and from servers using a trusted integrations authenticated by a combination of methods, which may include password, public key, and PEM formatted private key pairs. This requires the setup of credentials created specifically for SFTP actions.

Note:

For information about rotating key pairs, see Rotating Key Pairs for Integration Credentials.

Supported SFTP Algorithms

Algorithm Type

Supported

Key Exchange

curve25519-sha256

curve25519-sha256@libssh.org

ecdh-sha2-nistp256

ecdh-sha2-nistp384

ecdh-sha2-nistp521

diffie-hellman-group-exchange-sha256

diffie-hellman-group16-sha512

diffie-hellman-group18-sha512

diffie-hellman-group14-sha256

ext-info-c

Host Key

ssh-ed25519

ecdsa-sha2-nistp256

ecdsa-sha2-nistp384

ecdsa-sha2-nistp521

rsa-sha2-512

rsa-sha2-256

Cipher

aes128-ctr

aes192-ctr

aes256-ctr

aes128-gcm@openssh.com

aes256-gcm@openssh.com

MAC

hmac-sha2-256-etm@openssh.com

hmac-sha2-512-etm@openssh.com

hmac-sha1-etm@openssh.com

hmac-sha2-256

hmac-sha2-512

hmac-sha1

Compression

None

JSCH Library Version

0.2.1

To create an SFTP Credential

  1. On the Integrations menu, select Credentials.

    The Credentials screen appears.

  2. Click the Add credentials button.

    The Select System screen appears.

  3. In the Select System field, select Generic.


  4. Click the Next button.

    The Enter Credential Details screen appears.

  5. Enter a name for the credential and an optional description.
  6. In the Connector Type field, select File Share. Additional fields appears.
  7. In the Auth Type field, select SFTP.


  8. Complete the remaining fields per your server requirements. You can make one of the following selections for this credential's Authentication Method.
    • Password

    • Private Key (optional Passphrase)

    • Password and Privacy Key (optional Passphrase)

    Note:

    You will also need to add the public-private key pair created here to the system with which you are integrating. OneTrust supports the following for SFTP private keys:

    • RSA Private Keys (PEM) - PKCS8 (with or without Encryption)

    For more information on generating keys, see Generating RSA Keys for SFTP Authentication in OneTrust Integrations.

  9. Click the Save button.

To select SFTP credentials for a workflow action

  1. On the Integrations menu, select Integrations.

    The Integrations screen appears.

  2. Click on the name of a connection.

    The Integration Builder screen appears.

  3. In the Builder tab, add an action.
  4. Click the Select Existing Credentials option, then choose your credential from the selection field.


  5. Click the Next button to configure the action's Request, Response, and/or Settings.
  6. In the Request tab, provide the necessary details for the action's call to the supplied server. Some OneTrust actions may ask for a file name or file reference.


  7. Click the Finish button.
  8. Configure the rest of the workflow as necessary.
  9. Click the Save button.
  10. Click the Activate button.