> For the complete documentation index, see [llms.txt](https://docs.couchdrop.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.couchdrop.io/storage/integrations/azure-blob.md).

# Azure Blob

Couchdrop has comprehensive support for Azure Blob containers out of the box. This document outlines requirements, configuration steps and capabilities for using Azure Blob with Couchdrop.

## Overview

Couchdrop connects to Azure Blob Storage using Azure's native storage APIs. Once connected, your Azure Blob container appears as a folder in Couchdrop, allowing you to use the storage location with SFTP, FTP/FTPS, Web Access, and Automations.

Your files remain stored in Azure Blob while Couchdrop provides the transfer and access layer for managing file exchange.

## How to connect Azure Blob to Couchdrop

{% hint style="warning" %}

### Before you start

To connect Azure Blob, you will need:

* Access to Couchdrop with the appropriate permissions
* An existing Azure Blob container, or permission to create one
* One of:
  * Azure Account Name + Azure Account Key
  * Azure SAS URL
    {% endhint %}

{% stepper %}
{% step %}

### Prepare your Azure Blob container

In the Azure Portal, navigate to **Storage accounts** and select your storage account.

Select **Containers** from the left menu.

Use an existing container or click **+ Container** to create a new container. Set the access level to **Private**.
{% endstep %}

{% step %}

### Generate Azure credentials

Choose one of the following authentication methods:

**Option A:** Access Key (simple but broad permissions)

1. In the storage account, go to **Access keys**.
2. Copy the **Storage account name** and **Key1**.

**Option B:** SAS Token (more secure / scoped)

1. In the storage account, go to **Shared access signature**.
2. Select:
   * Allowed services: **Blob**
   * Allowed resource types: **Container** and **Object**
   * Allowed permissions: **Read, Write, List, Delete** (depending on Couchdrop use)
   * Set start and expiry date.
3. Click **Generate SAS** and copy the **SAS token**.

{% hint style="info" %}
Treat Storage Account Access Keys and SAS tokens as sensitive credentials. Microsoft recommends using HTTPS when sharing or using SAS credentials.
{% endhint %}
{% endstep %}

{% step %}

### Create an Azure Blob connection in Couchdrop

In Couchdrop, add a new storage connection and select **Azure Blob**.

Select your **Azure Endpoint**, then enter the required connection details.

For **Azure Files Default** or **US Govt Storage**:

* **Azure Account Name**
* **Azure Account Key**
* **Azure Container Name**
* **Endpoint Suffix** (optional)

For **Azure SAS URL**:

* **Azure SAS URL**
* **Endpoint Suffix** (optional)

{% hint style="info" %}

#### Azure endpoint options

When connecting Azure Blob to Couchdrop, choose the endpoint that matches your Azure environment and authentication method.

* **Azure Files Default -** Use this for standard Azure public cloud storage. Couchdrop connects using Azure’s normal storage endpoints, such as `*.blob.core.windows.net`.
* **US Govt Storage -** Use this when your storage account is hosted in Azure US Government. Government storage uses separate endpoints ending in `core.usgovcloudapi.net`.
* **Azure SAS URL** - Use this when you want Couchdrop to authenticate using a Shared Access Signature URL rather than an account key. The SAS URL contains the storage endpoint and scoped credentials needed to access the permitted Azure resources.
  {% endhint %}
  {% endstep %}

{% step %}

### Verify your connection

Select **Save and Test** to verify the Azure Blob connection.

After the connection has been tested successfully, you can optionally select a specific Azure Blob container or folder to map into Couchdrop.

Leaving this blank allows Couchdrop to map the Azure Blob connection without restricting it to a specific location.

When a folder or container is selected, Couchdrop limits access to that location and its subfolders.
{% endstep %}

{% step %}

### Save and use your Azure Blob connection

Optionally, configure **Transfer Shield** to surface or block unexpected, non-compliant, or malicious files uploaded through this connection.

When the configuration is complete, select **Add Integration**.

{% hint style="success" %}
Your Azure Blob container will now appear as a folder in Couchdrop and can be used by Couchdrop users, transfer protocols, and Automations according to the access you configure.
{% endhint %}
{% endstep %}
{% endstepper %}

***

## Supported features

<table data-search="false"><thead><tr><th>Feature</th><th>Supported</th></tr></thead><tbody><tr><td>Upload files</td><td>Yes</td></tr><tr><td>Download files</td><td>Yes</td></tr><tr><td>List files and folders</td><td>Yes</td></tr><tr><td>Create folders</td><td>Yes</td></tr><tr><td>Delete folders</td><td>Yes</td></tr><tr><td>Delete files</td><td>Yes</td></tr><tr><td>Azure Access Controls</td><td>Supported via static IP in Couchdrop</td></tr></tbody></table>

## Frequently asked questions

<details>

<summary>Can different users have different access to Azure Blob?</summary>

Yes. Couchdrop users can be given access to specific folder locations, allowing different users or partners to access different areas of your connected Azure Blob storage.

Couchdrop user permissions can also control whether users can read, write, or delete files.

</details>

<details>

<summary>Does Couchdrop store my Azure Blob files?</summary>

No. Files transferred through Couchdrop to or from Azure Blob are not stored at rest on Couchdrop infrastructure.

Azure Blob remains the storage location while Couchdrop provides the transfer and access layer.

</details>

<details>

<summary>Can I use SFTP with Azure Blob?</summary>

Yes. Once Azure Blob is connected to Couchdrop, you can provide Couchdrop users with SFTP access to the connected storage.

Each SFTP user can be assigned a home/root directory and filesystem permissions that determine what they can access.

</details>

<details>

<summary>Can I use FTP or FTPS with Azure Blob?</summary>

Yes. Couchdrop users can also be permitted to connect using FTP or FTPS, allowing those protocols to access files stored in the connected Azure Blob location.

</details>

<details>

<summary>Should I use an Access Key or SAS token?</summary>

Both authentication methods are supported by the Couchdrop configuration described above.

An Access Key provides access using credentials for the Storage Account. A SAS can provide more restricted access by defining the resources, permissions, and validity period available to the credential.&#x20;

</details>