A Deep Dive into FTP Setup in Salesforce Marketing Cloud (SFMC)
- sfmcstories
- 5 days ago
- 4 min read
Enhanced FTP is a powerful and essential feature in Salesforce Marketing Cloud that enables seamless and secure data exchange between external systems and SFMC. Whether you're importing leads or exporting campaign results, understanding and configuring FTP correctly is key to scalable automation.
Why FTP Matters in SFMC Workflows
Automate imports of subscriber and transactional data
Export tracking data and reports for analysis
Securely transfer large volumes of files
Integrate with CRMs, ERPs, and other external platforms
Trigger automation workflows based on file arrivals
1. Setting Up Enhanced FTP in SFMC To begin, navigate to Setup > Data Management > FTP Accounts in your Salesforce Marketing Cloud instance. From here, you can retrieve your FTP hostname, username, and password. If Enhanced FTP is not yet enabled for your account, you may need to raise a support request with Salesforce.
As of the latest release, you can now create up to three FTP users per Business Unit, which gives you more flexibility and control over access. Make sure to restrict FTP access via IP allowlisting to enhance security. Additionally, Salesforce now supports SSH key authentication, allowing you to move away from passwords in favor of more secure access credentials. SSH keys can be generated externally and added through the Key Management section under Setup.
Steps to follow:
Navigate to Setup > Data Management > FTP Accounts
Retrieve FTP hostname, username, and password
If FTP is not yet enabled, raise a Salesforce Support request
Restrict access via IP allowlisting for security
[New Update]
You can now create multiple FTP users (up to 3 per BU)
Setup supports SSH key authentication for enhanced security
2. FTP Folder Structure Overview
/Import – For incoming data files to be ingested
/Export – For files generated and exported by SFMC
/Safehouse – For encrypted/secure file processing
/Triggers – Used with legacy Triggered Sends
/Pickup/Reports – Auto-generated reports folder
3. Connection Details
SFMC uses the SFTP protocol exclusively—traditional FTP is deprecated. You should connect to the server using port 22 and the hostname provided in your setup panel. Authentication can be done using either username/password or an SSH key, with the latter being highly recommended for security.
You can now also configure external FTP locations from within SFMC. This allows you to securely send and receive files from third-party SFTP servers outside of the Salesforce environment. Go to Setup > Data Management > File Locations to set up these external connections, which can then be used in your automation activities.
Protocol: SFTP (FTP is deprecated)
Port: 22
Hostname: ftpXXXX.exacttarget.com (from Setup)
Authentication: Username/Password or SSH Key
[New Update]
Add external FTP locations under Setup > File Locations
Use with Data Extracts and File Transfers for third-party systems
4. Automate With Automation Studio
Automation Studio is where Enhanced FTP becomes truly powerful. You can set up automations that are triggered as soon as a file lands in the /Import directory. Once triggered, the automation can include an Import Activity to bring the data into a Data Extension, followed by additional steps such as segmentation or email sends.
You can also export data using a combination of Data Extract and File Transfer activities. Naming conventions like contacts_202504.csv help in matching files automatically within your automation. Make sure to monitor each step in the automation to handle failures or retries effectively.
File Drop Automations – Start an automation when a file is placed in /Import
Import Activity – Ingests data into a Data Extension
Extract & File Transfer – Export data and send it to /Export or Safehouse
Use naming patterns like contacts_202504.csv to automate matching
5. Advanced Configuration & Security
Salesforce recommends enabling PGP encryption and decryption for any files that contain sensitive data. You can generate and manage encryption keys via the Key Management interface. SSH public keys should also be managed from this section if you're opting for key-based authentication.
To avoid race conditions or overlapping steps, it's a good practice to build buffer time between file arrivals and processing. Always monitor your automation logs and FTP server activity to catch and resolve issues early.
Enable PGP encryption/decryption for sensitive data
Add SSH public keys via Key Management in Setup
Schedule buffers in automation to avoid race conditions
Monitor logs for encryption, format, or connection errors
6. Troubleshooting Checklist
File not found? → Ensure correct folder and naming pattern
Login fails? → Check SFTP port, IP allowlist, and credentials
Automation fails? → Review Automation Studio logs
Decryption fails? → Verify PGP method and key setup
Export not arriving? → Confirm File Transfer step is active
[Latest Best Practices – 2025 Update]
The latest release brings several new best practices and features.
Use SFTP only—FTP is deprecated by Salesforce
Multiple FTP Users now supported (up to 3 per BU)
Setup external FTP file locations in Setup
Use Safehouse for secure temp processing
Restrict via IP Allowlist and rotate keys regularly
Use SSH key authentication where possible for extra security
More Details: https://sfmcstories.wixsite.com/storiesspot/post/what-s-new-with-sftp-in-salesforce-marketing-cloud-2025-edition
Conclusion
Enhanced FTP in SFMC has evolved with improved security, flexibility, and integration support. Whether you're syncing daily CRM dumps or exporting campaign results, FTP ensures reliable automation. With the latest updates, you're now more empowered to secure and scale your data operations with best-in-class practices.
Comments