Skip to main content

Govern File Access With OneLogin Identity

Files.com signs people in with OneLogin over SAML and syncs accounts over SCIM. Partner SFTP, outside file exchange, and scheduled drops all sit behind the same login your people already use, so file access follows the rules your security team already runs. Accounts created or removed in OneLogin update in Files.com on their own, so you never set up a file user by hand or leave one behind after they go.

OneLoginFiles.com

Why Teams Run Files.com Behind OneLogin

OneLogin handles sign-in, the second-factor check, and the whole hire-to-leave lifecycle across your apps. Files.com signs in through it over SAML and syncs accounts over SCIM. Moving files comes under the same login and the same controls, so file transfer stops being the one system your identity rules don't reach. Accounts created and turned off in OneLogin update in Files.com on their own, so there is nothing to keep in sync by hand.

One Login Across Every App

People sign in to Files.com with their OneLogin account. It is the same one they use for every other OneLogin app, so there is no separate file-access password to hand out, reset, or remember.

New Hires Get Access, Departing People Lose It, On Their Own

The moment someone is added in OneLogin, they get their Files.com access. The moment they are turned off, that access is removed across the web, SFTP, and the Desktop App at once. A new hire is productive on day one, and a departed employee can't keep access nobody remembered to revoke. This is what SCIM does.

Pay Only for People Who Actually Sign In

You can sync your whole OneLogin directory into Files.com and not pay for the people who never log in. A seat starts counting only once that person signs in for the first time, so your bill tracks who actually uses Files.com, not the size of your directory.

A Second Login Check, Even on SFTP

Keep your second-factor check (MFA) in OneLogin for your own people. For outside accounts OneLogin does not manage, add Files.com’s own second factor (2FA). It covers SFTP, FTP, and WebDAV too, not just the browser, so a partner moving files over SFTP gets the same second check as a person clicking around the web.

Groups Decide Who Sees Which Folders

A OneLogin group maps straight to the folders that group can open, or to an admin role. Access stays defined in OneLogin, where your security team already runs it, so you don't keep a second list of who-can-see-what and watch the two drift apart.

OneLogin Governs Login, Files.com Governs Access

OneLogin decides who gets in. Files.com decides what they reach once they are in. That means nine levels of access, set per person or per group, folder by folder. You can also block access and fence in junior admins, so each person reaches only the files their job needs. Every sign-in, account sync, and permission change is written to the Files.com audit log, so when an auditor asks who could see what and when, you have the answer on hand.

Departing People Cut Off Automatically

Turn off a departing employee in OneLogin and the next sync turns off their Files.com account too. Web, SFTP, and Desktop App, all removed. There is no forgotten account left behind for someone to use after they leave, and your next access review comes back clean.

A Clear Record When Something Looks Off

Files.com keeps a separate, detailed log of every account it creates, changes, or turns off from OneLogin. If a sync does not land the way you expected, you can see exactly what OneLogin sent, so you track down the problem in minutes instead of guessing. It sits alongside the main audit log.

Control Down to the Folder

Grant access per person or per group, folder by folder. You can also block access and fence in junior admins, so a person only ever sees the folders their job needs and nothing more. Which OneLogin group someone is in decides their folders and admin level.

The Second-Factor Check Covers SFTP Too

Outside partner accounts created in Files.com can be required to use Files.com's second-factor check (2FA). It holds over SFTP, FTP, and WebDAV, not just the browser, so a stolen partner password alone can't open your files.

SSO That Plenty of Big Companies Rely On

Files.com runs one of the most widely used SSO setups in managed file transfer, trusted by a large base of enterprise customers for sign-in-controlled file access.

The Details That Matter for OneLogin

Full Create, Update, and Remove

Create people and groups, keep them current, and turn them off, all driven from OneLogin. Change the directory and Files.com follows, so no one has to log into the file platform to keep accounts in sync (this is SCIM).

Auto-Create on First Login, Without SCIM

If you have not turned on account sync (SCIM) yet, Files.com just creates the account the first time someone signs in (this is JIT), so you can be live without a provisioning project. It cannot remove or disable people, though. Use SCIM when you need departing people cut off automatically.

Several OneLogin Setups, One Files.com Site

Connect more than one OneLogin instance or app to a single Files.com site. Separate business units can run their own OneLogin against one shared file platform, so you consolidate file transfer onto one site without forcing everyone onto one directory.

Let Only the Right Groups In

Point specific OneLogin groups at the right level of access, so only the people you mean to let in land in Files.com, each with the permissions their group is meant to have.

Connect OneLogin the Way That Fits Your Workload

Sign In via SAML

The way people sign in to Files.com with their OneLogin account. One thing to watch: set the certificate fingerprint to SHA-256. OneLogin defaults to the older SHA-1, and Files.com uses SHA-256, so changing it once up front saves you a failed first sign-in.

Automatic Account Sync (SCIM)

Turn this on for automatic create, update, remove, and group sync, including cutting off departing employees on their own. This is the setting that keeps your account list correct without anyone maintaining it by hand.

Auto-Create on First Login (JIT)

Nothing extra to set up. This is what happens when account sync (SCIM) is off. Accounts are created the first time someone signs in. Good for getting started fast. Because it can't remove people, use SCIM when you need departing people cut off automatically.

How Teams Use OneLogin on Files.com

Sign In With OneLogin

Someone clicks Sign in with OneLogin on the Files.com login page and logs in. They are in, with the same account they use across your apps.

Add Someone to a Group, Their Account Appears

Add a person to a OneLogin group. Files.com creates their account, gives them that group's folders, and sets their admin level. There is no manual setup, so the person is ready to work the moment they join the group.

One Action to Cut Off Access When Someone Leaves

Turn off a departing employee in OneLogin and the next sync turns off their Files.com account everywhere. This only affects the account that was synced from OneLogin in the first place.

A Second Check From Staff and Partners Alike

OneLogin asks your own people for a second factor (MFA). Outside partner accounts created in Files.com are required to use Files.com's second factor (2FA), which holds over SFTP.

Files.com Features Teams Use With OneLogin

User Management & Permissions

The folder permissions your OneLogin groups map into. Nine levels of access per folder.

Learn More

Audit Log & Forensic Trail

Every OneLogin sign-in and account sync is written to a record you can export.

Learn More

SFTP & Protocol Access

Folder permissions and the second-factor check reach SFTP, FTP, and WebDAV, not just the browser a OneLogin user signs into.

Learn More

Data Retention & Governance

Rules that decide how long files stick around once a OneLogin user has put them in Files.com.

Learn More

Frequently Asked: OneLogin on Files.com

Common questions about how Files.com connects to OneLogin, what it costs, and what the integration actually does.

Connect OneLogin And Ship Today

Start a free 7-day trial. Connect OneLogin to Files.com over SAML, turn on account sync, and prove sign-in-controlled file access on your own workload. No credit card required.

No credit card required • 7-day free trial • Setup in minutes