What This Integration Does
The SFTP integration automates member profile management on the 10KC platform by syncing with CSV flat files exported from your HRIS or Identity Management software. Each line in the CSV represents one member's profile.
The integration handles four operations automatically:
Operation | What Happens |
Create Profiles | Employees in the flat file who do not have 10KC accounts will receive an email invitation to create one. Existing account holders will not receive duplicate invitations. |
Update Profiles | Employees in the flat file who already have active 10KC accounts will have their profile attributes updated to match the latest file. |
Delete Profiles | Employees removed from the flat file will have their 10KC accounts deleted. Deleted accounts can be restored within 30 days by contacting your Customer Success team. |
Deactivate / Reactivate Profiles | If your file includes a |
Important: The SFTP sync does not send automatic invite emails to newly added employees. Invitations are managed separately.
Implementation Steps
Step 1 — Create Your CSV Flat File
Export a CSV file from your HRIS or Identity Management software that lists all members intended for the 10KC program.
File Format Requirements
Format: Comma-separated values (.csv), UTF-8 encoded.
Header row: The first row must contain column titles only. Column headers must match the exact field names listed in the field reference tables below.
No quotes in headers: Column headers must not contain quotation marks (
").Single sheet only: The CSV file must contain only one sheet.
File naming: Each file name must be unique. Include a date or timestamp (e.g.,
10KC_Membership_File_YourOrg_2025-01-13.csv). Files cannot overwrite previous uploads.
Field Reference
Start with the required fields, then add recommended and optional fields based on what is available in your HRIS system. Each additional field improves matching quality and platform capabilities.
Required Fields
Field Name (Column Header) | Example | Notes |
| Jane | Use this exact header label. |
| Doe | Use this exact header label. |
| Use this exact header label. Email typically serves as the primary unique identifier. | |
| Director | Maps to the "Role" segment in 10KC. Accepted values: |
Recommended Fields
These fields improve match quality. Include them if they are available in your HRIS.
Field Name (Column Header) | Example | Notes |
| Solutions Engineer |
|
| Consulting |
|
| Engineering |
|
| Yes | Use only |
| Used to exclude members from matching with their direct manager. |
Optional Fields
Field Name (Column Header) | Example | Notes |
| Atlanta | Used for matching members across geographies. |
| en-US | Specifies the member's preferred language. English ( |
| active | Used to deactivate and reactivate profiles for employees on leave. Use only |
Sample CSV
Review the 10KC CSV template to see the correct formatting before building your export. The template includes all required, recommended, and optional fields with example data showing expected formats.
Recommendations
Automate the CSV export on a set schedule (weekly or monthly works for most organizations).
Include all employees in your organization — not just program participants — to unlock retention and career mobility insights.
Data Mapping
You do not need to fill out a data mapping table yourself as you don't have access to the custom fields in 10KC. Send a sample CSV file to 10KC, and we will populate the mapping for you. Custom fields beyond the ones listed above are also supported — get the list of additional custom fields the program admin plans to include so we can configure them.
Step 2 — Set Up SFTP File Transfer
10KC will provide your IT team with SFTP connection details (host, IP address, port, and credentials) directly during onboarding. Contact [email protected] to get started.
To prepare in advance, your IT team should be ready to:
Provide an SSH public key to 10KC for user authentication.
Safelist an IP address on your network's firewall/allowlist (the IP will be shared during setup).
Connect using a non-standard port — the SFTP server does not use the default port 22. The exact port will be provided with your credentials.
Schedule automated uploads via a cron job, ETL pipeline, or your preferred automation tool at your agreed-upon cadence (weekly, monthly, etc.). 10KC will provide the exact SFTP command with host, port, and connection details.
Step 3 — Encrypt Your Files
All files transferred via SFTP must be encrypted using the OpenPGP standard (RFC 4880) before upload.
Item | Details |
Encryption standard | OpenPGP (RFC 4880) |
Supported file extensions |
|
Encryption methods | Both symmetric and asymmetric encryption are supported |
To get started with encryption:
Contact [email protected] to receive 10KC's public PGP key.
If using asymmetric encryption, share your public PGP key with 10KC.
Send a sample encrypted file to verify your setup before going live.
Step 4 — Test the Integration
Testing is performed against your production environment. This is safe because:
The SFTP sync does not trigger automatic invite emails to members.
The integration does not need to be finalized before your program go-live; setup can continue post-launch.
During testing, the 10KC team will:
Review your sample CSV file to confirm it meets requirements.
Process the file and share a summary of profiles to be created, updated, and deleted.
Ask your team to verify the results before activating the integration.
Step 5 — Go Live
After verification, the 10KC team enables the integration on your production tenant. From this point on, files uploaded at your scheduled cadence will be processed automatically. Processing typically completes within minutes.
Frequently Asked Questions
Question | Answer |
How quickly are uploaded files processed? | Files are read immediately after upload. Processing typically completes within minutes — often under a minute. |
How often should we upload files? | Monthly works for most organizations. Weekly or even daily uploads are supported if your data changes frequently. |
Do we need to build the data mapping table ourselves? | No. Send a sample CSV file, and the 10KC team will create the mapping for you. |
Can we use custom fields? | Yes. Share the list of custom fields you plan to include so 10KC can configure them in your hub. |
Are hyphens considered special characters? | No. Hyphens in names or email addresses are handled normally. |
Will new employees receive automatic invites from the sync? | No. The SFTP sync does not trigger automatic invite emails. Invitations are managed separately. |
What is the difference between deleting and deactivating? | Deleting removes the account entirely (restorable within 30 days via Customer Success). Deactivating hides the account from the platform, removes the member from programs, and stops communications — but the account remains and can be reactivated when the |
What is the primary unique identifier? | Email is typically the primary identifier. In SSO configurations, the user ID from your identity provider may take precedence. |
Is there a test environment? | Testing is done in production. This is safe — SFTP sync does not send invites, and the integration can be configured before or after your program launch. |
What values are accepted for the management_level field? |
|
What languages are supported for the locale field? | English ( |
Troubleshooting
Issue | Likely Cause | Resolution |
Authentication error when connecting to SFTP | Credentials email may have been caught by a spam filter, or the SSH public key has not been provided to 10KC. | Check your spam/junk folder for the credentials email. Ensure you have sent your SSH public key to [email protected]. |
Connection refused or timeout | The 10KC SFTP IP address may not be safelisted on your network, or you may be connecting on the wrong port. | Confirm the IP address provided during onboarding is added to your firewall/network allowlist. Verify you are using the correct port (not the default port 22). |
Fields not mapping correctly | Column headers in your CSV may not match the exact field names expected by 10KC (e.g., using "Job Title" instead of | Double-check that your column headers match the field names in the Field Reference tables above. Contact your 10KC Customer Success Manager to review the data mapping if issues persist. |
File upload appears successful but no changes are reflected | The file may not be encrypted, or the file extension may not be recognized. | Confirm the file is encrypted with OpenPGP and uses a supported extension ( |
Duplicate file name rejected | 10KC does not allow files to be overwritten. | Append a date or timestamp to each file name to ensure uniqueness (e.g., |
Unexpected values in "Role" segment | The | Ensure values match exactly: |
Quick Reference
Parameter | Value |
SFTP connection details | Provided during onboarding by the 10KC support team |
Authentication | SSH public key |
File format | CSV (UTF-8 encoded), single sheet, no quotes in headers |
Encryption | OpenPGP (RFC 4880) — |
Required CSV fields |
|
Recommended CSV fields |
|
Optional CSV fields |
|
CSV template | |
Contact |
Security & Compliance
The 10KC platform is SOC 2 Type II certified, ISO 27001 compliant, and GDPR compliant. All data is encrypted in transit (TLS 1.2) and at rest (AES-256). Infrastructure is hosted on Google Cloud with enterprise-grade security controls.
For more information about 10KC's security and data protection practices, visit our Trust Center.
Need help? Contact [email protected] for integration support, or reach out to your 10KC Customer Success Manager.