Skip to main content

Access Key vs. Shared Access Signature (SAS) Token

Files.com can connect to Azure Files using a storage account access key or a Shared Access Signature (SAS) token. An access key grants broad storage account access. A SAS token limits the resources, operations, and validity period available to anyone holding it; it is not inherently tied to a particular Files.com user.

Use a token scoped to the resources and operations the integration needs. Protect either credential as a secret. Follow Azure's SAS guidanceExternal LinkThis link leads to an external website and will open in a new tab when choosing its lifetime and permissions.

Credential Rotation

Files.com uses the key or token saved on the Remote Server. Replace a SAS token before it expires, and update the Remote Server before revoking an old access key. A SAS token does not refresh itself. Choose an expiration period your organization can support with a reliable rotation process.

An expired or revoked credential causes dependent Mounts, Syncs, automations, and transfers to fail until you replace it. Review failed or partially completed runs after restoring access; some files may already have transferred. Do not wait for an expiry-related outage to rotate the credential.