Azure Blob

Couchdrop has comprehensive support for Azure Blob containers out of the box. This document outlines requirements, configuration steps and capabilities for using Azure Blob with Couchdrop.

Overview

Couchdrop connects to Azure Blob Storage using Azure's native storage APIs. Once connected, your Azure Blob container appears as a folder in Couchdrop, allowing you to use the storage location with SFTP, FTP/FTPS, Web Access, and Automations.

Your files remain stored in Azure Blob while Couchdrop provides the transfer and access layer for managing file exchange.

How to connect Azure Blob to Couchdrop

Before you start

To connect Azure Blob, you will need:

• Access to Couchdrop with the appropriate permissions
• An existing Azure Blob container, or permission to create one
• One of:

  • Azure Account Name + Azure Account Key
  • Azure SAS URL

1

Prepare your Azure Blob container

In the Azure Portal, navigate to Storage accounts and select your storage account.

Select Containers from the left menu.

Use an existing container or click + Container to create a new container. Set the access level to Private.

2

Generate Azure credentials

Choose one of the following authentication methods:

Option A: Access Key (simple but broad permissions)

1. In the storage account, go to Access keys.
2. Copy the Storage account name and Key1.

Option B: SAS Token (more secure / scoped)

1. In the storage account, go to Shared access signature.
2. Select:

   • Allowed services: Blob
   • Allowed resource types: Container and Object
   • Allowed permissions: Read, Write, List, Delete (depending on Couchdrop use)
   • Set start and expiry date.
3. Click Generate SAS and copy the SAS token.

Treat Storage Account Access Keys and SAS tokens as sensitive credentials. Microsoft recommends using HTTPS when sharing or using SAS credentials.

3

Create an Azure Blob connection in Couchdrop

In Couchdrop, add a new storage connection and select Azure Blob.

Select your Azure Endpoint, then enter the required connection details.

For Azure Files Default or US Govt Storage:

• Azure Account Name
• Azure Account Key
• Azure Container Name
• Endpoint Suffix (optional)

For Azure SAS URL:

• Azure SAS URL
• Endpoint Suffix (optional)

Azure endpoint options

When connecting Azure Blob to Couchdrop, choose the endpoint that matches your Azure environment and authentication method.

• Azure Files Default - Use this for standard Azure public cloud storage. Couchdrop connects using Azure’s normal storage endpoints, such as *.blob.core.windows.net.
• US Govt Storage - Use this when your storage account is hosted in Azure US Government. Government storage uses separate endpoints ending in core.usgovcloudapi.net.
• Azure SAS URL - Use this when you want Couchdrop to authenticate using a Shared Access Signature URL rather than an account key. The SAS URL contains the storage endpoint and scoped credentials needed to access the permitted Azure resources.

4

Verify your connection

Select Save and Test to verify the Azure Blob connection.

After the connection has been tested successfully, you can optionally select a specific Azure Blob container or folder to map into Couchdrop.

Leaving this blank allows Couchdrop to map the Azure Blob connection without restricting it to a specific location.

When a folder or container is selected, Couchdrop limits access to that location and its subfolders.

5

Save and use your Azure Blob connection

Optionally, configure Transfer Shield to surface or block unexpected, non-compliant, or malicious files uploaded through this connection.

When the configuration is complete, select Add Integration.

Your Azure Blob container will now appear as a folder in Couchdrop and can be used by Couchdrop users, transfer protocols, and Automations according to the access you configure.

---

Supported features

Feature	Supported
Upload files	Yes
Download files	Yes
List files and folders	Yes
Create folders	Yes
Delete folders	Yes
Delete files	Yes
Azure Access Controls	Supported via static IP in Couchdrop

Frequently asked questions

Can different users have different access to Azure Blob?

Yes. Couchdrop users can be given access to specific folder locations, allowing different users or partners to access different areas of your connected Azure Blob storage.

Couchdrop user permissions can also control whether users can read, write, or delete files.

Does Couchdrop store my Azure Blob files?

No. Files transferred through Couchdrop to or from Azure Blob are not stored at rest on Couchdrop infrastructure.

Azure Blob remains the storage location while Couchdrop provides the transfer and access layer.

Can I use SFTP with Azure Blob?

Yes. Once Azure Blob is connected to Couchdrop, you can provide Couchdrop users with SFTP access to the connected storage.

Each SFTP user can be assigned a home/root directory and filesystem permissions that determine what they can access.

Can I use FTP or FTPS with Azure Blob?

Yes. Couchdrop users can also be permitted to connect using FTP or FTPS, allowing those protocols to access files stored in the connected Azure Blob location.

Should I use an Access Key or SAS token?

Both authentication methods are supported by the Couchdrop configuration described above.

An Access Key provides access using credentials for the Storage Account. A SAS can provide more restricted access by defining the resources, permissions, and validity period available to the credential.