Skip to main content

SFTP and Azure File Share Integration

Written by Judi Zietsman

Quick Summary: The SFTP and Azure File Share integrations enable secure file-based data exchange between your hosted storage environment and the app. The app retrieves source files to generate inventory recommendations and returns output files, such as purchase orders, to your storage environment.

Data Flow

Inbound data

  1. Customer systems generate CSV files and place them on the SFTP server or Azure File Share.

  2. The Netstock IA Data Orchestration Service, or DOS, retrieves the files and validates their structure.

  3. The data is transformed and stored in a secure staging database.

  4. Netstock imports and processes the staging data to generate recommendations.

Outbound data

  1. The app generates output files, including orders, transfers, logs, and reports.

  2. The output files are published back to the SFTP server or Azure File Share.


Requirements and Setup

SFTP Setup

A customer-hosted SFTP server must be available with two designated directories:

  • One directory from which source files are retrieved

  • One directory to which app-generated output files are published

The following authentication methods are supported:

  • Username and password

  • Username and private SSH key

Azure File Share Setup

To integrate using Azure File Share, create an Azure Storage Account and a File Share.

A Shared Access Signature, or SAS, token is required for connectivity. When configuring the SAS token:

  • Select File as the service.

  • Under Allowed resource types, select Service, Container, and Object.

  • Enable the Read, Write, Delete, List, and Create permissions.


Security Considerations

Customer Hosted Storage Security

Customers are responsible for securing their own SFTP server or Azure storage environment.

DOS and Data Security

The app operates independent DOS instances in each supported region. This keeps customer data isolated within its designated region and prevents it from being shared across regions.

Credentials and SAS tokens are stored securely in a vault. Staging databases are also isolated within the designated region.

Data is handled in accordance with the applicable Personal Data Protection Policies.


Forget about these 👇 😞 😐 😃 Have your say here!

Did this answer your question?