Federate Entra ID To Files.com

If you already manage access in Entra ID, Files.com signs people in with it. It is the same Microsoft login your team uses for SharePoint and Teams. Provision someone in Entra and they get file access automatically. Deprovision them and the access goes away on its own. You stop setting up file users by hand, and no one keeps access to your files after they leave.

Start My Free Trial Contact Sales

No credit card required · 7-day free trial · Live in minutes

#1 MFT vendor in Gartner Peer Insights

Trusted by 4,000+ companies

Every protocol included

4,000+ organizations rely on Files.com every day

Real companies. Real file flows. Real results.

Why Microsoft Shops Run Files.com Behind Entra ID

If your company runs on Microsoft 365, Entra ID is the login behind all of it. It checks who people are, applies your sign-in rules, and handles them from hire to leave. Files.com sits behind that same login. So your file transfer is governed by the same identity, the same rules, and the same offboarding as every other app. There is nothing separate to manage.

The Same Microsoft Login

People sign in to Files.com with their Entra ID. It is the same login behind Microsoft 365, Teams, and SharePoint. No second password to remember or manage.

Access Added On Hire, Removed On Exit

Add someone in Entra and their Files.com account follows automatically. Turn them off and the same sync removes their web and Desktop App access. So a new hire is productive on day one, and a former employee can never still reach your files. Over SAML the sync uses the SCIM standard and runs on Entra's own schedule. The older LDAP path syncs once an hour.

You Only Pay For People Who Actually Sign In

You can sync your whole Entra directory into Files.com and not pay for the people who never log in. A seat starts counting only once that person signs in for the first time.

Your Partners Never Need Entra Accounts

Internal users sign in with Entra. Outside partners and vendors get Files.com accounts of their own, with passwords or SFTP keys, on the same site. So you exchange files with anyone without creating guest identities in your directory.

Microsoft's Login Rules Still Apply

Keep your second-factor check (MFA) and Microsoft's access rules (Conditional Access) in Entra. They run before anyone reaches Files.com. For outside accounts Entra does not manage, add Files.com's own second factor (2FA).

Entra Decides Who Gets In, Files.com Decides What They Reach

Entra decides who gets in and under what conditions. Files.com decides what each person can reach once they are in. Because access maps from your Entra groups, people get exactly what their role allows and nothing more. Least-privilege holds on its own, with no second list to maintain, which is the kind of control an access review wants to see.

Accounts Synced From Your Directory

Over SAML, Entra creates accounts in Files.com, keeps them current, and turns them off, all through the SCIM standard. Turn someone off in Entra and their Files.com access is gone on the next sync, with nothing for an admin to remember.

A Clear Record On Both Sides

Files.com keeps a detailed log of every account it creates, changes, or turns off from Entra, so you can see exactly what Entra sent. Entra's own logs give the matching view from the Microsoft side.

Control Down To The Folder

Nine levels of access, set per person or per group, folder by folder. You can block access and fence in junior admins. Access stays defined where your security team manages it.

The Second-Factor Check Covers SFTP Too

Files.com’s second-factor check (2FA) reaches SFTP, FTP, and WebDAV, not just the browser. So outside accounts Entra does not manage still get a second login check on every way in.

The Details That Matter For Entra ID

Account Sync That Keeps Up With Entra

Entra drives the sync on its own provisioning schedule and can push a single change on demand when you cannot wait for the cycle. Files.com applies exactly what Entra sends, so the account list matches the directory without anyone reconciling it by hand.

Use Account Sync When Groups Map To Folders

Turn on account sync (SCIM) whenever an Entra group needs to land people in the right folders and admin level. A new person then gets exactly the access their group is meant to have, so you set no permissions by hand and no one starts with more access than their role allows. For people with no group, auto-create on first login (JIT) is enough.

Many Files.com Sites, One Entra

Run several Files.com sites from a single Entra setup. Separate teams, business units, or brands each get their own sign-in. You manage every site from one Microsoft directory and never keep a second one in sync.

Connect Entra ID The Way That Fits Your Workload

SAML SSO

The recommended way in. People sign in to Files.com with their Entra login. It is the only method where Entra itself pushes account changes into Files.com (SCIM), so this is the path that provisions and deprovisions people for you.

OAuth SSO

The other Microsoft sign-in standard. People log in with their Entra account. It handles login only, with no account sync (SCIM), so you still create and remove Files.com accounts yourself.

LDAP SSO

For older setups that still run on-premises Active Directory. Account sync runs once an hour, and the directory password works for SFTP, FTP, and WebDAV, so the protocols use the same login as the browser.

Automatic Account Sync (SCIM)

Turn this on and Entra creates, updates, and removes Files.com accounts as the directory changes. New hires appear, changes follow, and people who leave are cut off, with no admin in the loop.

How Companies Use Entra ID On Files.com

Sign In With Your Microsoft 365 Login

Someone clicks Sign in with Entra ID and logs in with the same account behind Teams and SharePoint. They are in Files.com, with no separate password.

Add A New Hire, Their Account Appears

Add a new hire to the right Entra group, and Files.com builds their account on the next sync, with the folders that group is meant to have. Nobody files a ticket.

Cut Off Access The Moment Someone Leaves

When someone leaves and Entra turns them off, the next sync turns off their Files.com account too. Web and Desktop App access, gone.

Move From On-Premises AD To Entra, Bit By Bit

Your users sign in over LDAP today. Stand up Entra SAML next to it, move people across one sign-in method at a time, and retire the LDAP setup last. So you move to Entra at your own pace, with no overnight cutover and no one locked out mid-migration.

Files.com Features Often Used With Entra ID

Microsoft Sentinel

Feed Files.com audit events straight into the Microsoft security tool your team already watches, so a file-transfer alert shows up where your analysts are already looking.

Learn More

Groups & User Administration

Folder admins, group admins, and read-only admins each run their own slice of the site without holding the keys to all of it.

Learn More

Audit Log & Forensic Trail

Every Entra sign-in, account sync, and permission change is written to a tamper-proof record you can export. When an auditor asks who reached what and when, you have the answer ready.

Learn More

SFTP & Protocol Access

The same folders your Entra users reach in the browser are live over SFTP, FTP, and WebDAV, so scripts and partner systems work against one set of permissions.

Learn More

Data Retention & Governance

Set how long files stick around once an Entra user has put them in Files.com, so old data clears out on schedule and you meet a retention rule without anyone deleting files by hand.

Learn More

Files.com Will Be At Microsoft Ignite 2026

November 17–20, 2026 · San Francisco, CA

Files.com builds deeply on SharePoint, OneDrive, Azure, and Microsoft Entra ID, so of course we’ll be on the floor at Microsoft Ignite telling our File Orchestration story. The legacy MFT vendors won’t be there.

See Files.com At Microsoft Ignite

Customers Running Files.com With Microsoft Entra ID

See All Customer Stories

“Files.com's strengths are simplicity, ease of use, and the cloud connectors. We don't have to invent custom infrastructure for every partner.”

Tommy Chapley

Senior Software Engineer, Equifax

“Files.com is versatile — it can manage many different situations from a single platform. We've consolidated multiple tools onto it.”

Regis Litre

Chief Information Officer, Rag & Bone

“Files.com is robust and scales to a large enterprise. We get multiple files per minute, per second — and we're a 24/7 organization, so everything has to always be up.”

Nelson Miranda

Sr. Systems Engineer, Spirit Airlines

Frequently Asked: Entra ID On Files.com

How Files.com connects to Entra ID, what you pay, and what account sync does and does not cover.

Yes. Files.com works with Microsoft Entra ID for single sign-on and account sync over SAML, OAuth, or LDAP. We recommend SAML: it is the method that brings automatic account sync (SCIM), and it is more secure than the other two.

Yes. Over SAML, Entra ID creates accounts, keeps them current, and turns them off in Files.com through SCIM, running on Entra's own provisioning schedule. Entra can also provision a single user on demand. The older LDAP path syncs once an hour.

No. You can sync your whole Entra directory into Files.com and not pay for the people who never log in. A seat starts counting only once that person signs in for the first time. So what you pay tracks real usage, not directory size.

Yes. Files.com keeps a detailed log of every account it creates, changes, or turns off from Entra. You can see exactly what Entra sent, so a sync problem is easy to track down. Entra's own logs on the Microsoft side give the matching view.

Duplicates show up when the user.mail field in Entra does not match the person's Files.com username. To avoid them, either leave user.mail blank or make sure it matches the User Principal Name for everyone before you turn on account sync (SCIM) or SSO.

Entra does not send group membership in its sync requests, so the Files.com group allow/block filters do not work with Entra. Instead, use Entra's own scoping filters on a custom property to control which people sync over. For full group-based filtering, use LDAP provisioning on your Entra integration: Files.com reads memberships from your LDAP directory hourly while sign-in stays on Entra SAML.

Entra ID sends its user sync and group sync to Files.com as separate operations, and after the first full cycle it sends only recently modified objects, so a new user can arrive before their unchanged groups do. To resend the data, modify the group in Entra or use Entra's Provision on demand feature. Files.com creates any valid group and membership data Entra sends. For consistent group membership sync, Files.com also supports LDAP provisioning, which reads memberships straight from your directory while sign-in stays on Entra.

No. Over SAML and OAuth, an Entra login works for the browser and the Desktop App, but not for SFTP, FTP, WebDAV, the API, or mobile. Those use SFTP keys or API keys. The LDAP path is the exception: it lets the directory password work for those connections too.

Yes. Files.com runs Entra ID SAML sign-in next to your existing Active Directory/LDAP on the same site. Move people over to Entra one sign-in method at a time, and remove the old LDAP setup once everyone is across.