SFTP Account

An authorized user can configure one SFTP (Secure File Transfer Protocol) account for each instance of the Payer Portal. An SFTP account is used to securely transfer large files over the internet. The Payer SFTP Account is often used for migrating large amounts of data onto the HHAeXchange platform.

Users who need to view and access the SFTP Setup tab of the Admin > User Management feature are required to have the SFTP permission assigned to their Role. This permission defaults to ON for roles that currently have access to User Management, so that users already accessing the SFTP function can continue to do so without interruption.

For the New Payer Portal, assigning SFTP permissions to roles is performed by HHAeXchange System Administration. Contact the HHAeXchange Support Team for assistance.

The Payer Portal SFTP Account is set up on the SFTP Setup tab of User Management under Admin > User Management.

An authorized user can add a new SFTP account as described in the following table.

  1. From the Admin menu, click User Management, and then select the SFTP Setup tab.

    User Management page with SFTP Setup tab highlighted

    If the SFTP Setup tab has not been opened before, HHAeXchange presents a click-through agreement. To accept the agreement, click I agree as shown below.

    SFTP Authorization statement shown with SFTP Setup tab circled at top and I Agree button highlighted at bottom. User must click I Agree button to continue.

  2. On the SFTP Setup tab, type the Email address where SFTP alerts are to be sent.

    Username is read-only and populated by HHAeXchange.

    Partial image of SFTP Setup tab showing one sample user expanded and the Email field highlighted

  3. Type a New Password and confirm it in Confirm Password.

    SFTP passwords must meet the following criteria:

    • At least 8 characters in length

    • Both uppercase and lowercase letters

    • At least one number

    • At least one of the following special characters:   ! @ # $ % ^ *

  4. If you want to restrict FTP access to only specific IP addresses, select Restrict Access by IP.

  5. In the IP1, IP2, and IP3 fields, type the public IP addresses of the computers allowed to upload files using the SFTP account.

    Partial image of the SFTP Setup tab showing the Restrict Access by IP checkbox highlighted and selected with blank fields beneath and the Save button highlighted below that

  6. Click Save when you are finished.

An authorized user can delete an existing SFTP account as described in the following table.

  1. From the Admin menu, click User Management, and then select the SFTP Setup tab.

  2. On the SFTP Setup tab, click Delete at top right.

    Partial image of SFTP Setup tab showing one sample user expanded and the Delete button highlighted at right

  3. When prompted, confirm your decision to delete the SFTP Account by clicking Delete.

    Confirming Deletion page with Delete button highlighted at right

An authorized user can edit an existing SFTP account as follows.

  1. From the Admin menu, click User Management, and then select the SFTP Setup tab.

  2. On the SFTP Setup tab, make your changes. When you are finished, click Save.

    Username is read-only and populated by HHAeXchange.

    Partial image of SFTP Setup tab showing one sample user expanded and the Save button highlighted at lower left

The SFTP user password expires every 90 days. An automatic email notification is sent to SFTP users seven days before the password expiration date, reminding them to change their SFTP password.

Sample content of SFTP Password Expiration Email