Arcoro is excited to share that our Core HR system now supports SSH Key Authentication as a secure option for file exports. This enhancement introduces the ability to authenticate SFTP transfers using a private SSH key rather than a password, offering increased security and aligning with industry-standard best practices. 

What Does This Mean To You?

If your organization prefers key-based authentication for automated file transfers, it can now be configured under the export settings.  Exports can be found within Core HR by navigating to Data > Export > Manage.  For non-key-based authentication exports, no changes are required.  The customers’ existing setup will continue to function as expected. 

Enhancements

Transfer Type Naming

The transfer type option of ‘SFTP’ has been renamed to ‘SFTP Password Authentication’

Transfer Type Options

A new transfer type has been added, named 'SFTP Key Authentication'.  

SFTP Key Authentication

When the option ‘SFTP (Key Authentication)’ is selected, the following will be displayed:

1. FTP Username has been updated to be Username.  This is a required field.

   

2. A new field of SFTP Private Key has been added.  This is a text area and is a required field.  Password masking is applied to this field.

   

3. A new field of SFTP Passphrase has been added.  This is a text box and is an optional field.  Password masking is applied to this field.

   

4. FTP Port has been renamed to Port and remains an optional field.

   

5. The verbiage to the right of the Port field now reads "If not specified, the default port of 22 will be used".  This only applies when SFTP Key Authentication is selected.

   

6. ‘Test FTP Connection’ has been renamed to ‘Test Connection’

   

Use Cases 

Use Case 1: EDI Specialist sends files to Carriers

An EDI specialist needs to securely transmit enrollment files to a carrier that requires SSH Key Authentication. This update allows for the configuration of key-based SFTP in file export settings, meeting the carrier’s compliance standards, and supporting automated file delivery.

Use Case 2: HR Admin sends secure export of payroll data

Scenario: An HR administrator at a construction company needs to export sensitive employee data such as Social Security numbers, wage details, and hours worked from Core HR on a scheduled basis.

Why SSH Key Authentication is Needed:

• It's more secure than password-based authentication (no credentials are sent in transit).
• It allows for automated, non-interactive transfers without storing passwords in the system.
• The vendor requires SSH Key Authentication for compliance and auditability.