Setting up SFTP integrations for data ingress and egress

This help page provides information to transfer files to and from the online environment.

Information you need to provide to your consultant or support

Please provide the following information to your consultant or the support team, so that the online team can setup an SFTP account for you. The online team will also setup the automation to move files between the SFTP server and the PayGlobal Import folder (called the Data File Move Service), or vice versa if exporting files from PayGlobal.

1. Database number: E.g. PG1000NZ (Your consultant or support can source this.)

2. Company Name: Name of PayGlobal customer that integration is for.

3. Name of integration: E.g. BI or Timesheeting or vendor name. This will be used in the SFTP account name and folder names below.

4. Source Path: Data folder path if it is an outbound file, or SFTP folder path if it is an inbound file. E.g. "Datafolder\Export\BI" if exporting from PayGlobal. Or “SFTP\Import\Timesheeting” if inbound to PayGlobal.

5. Destination Path: Data folder path if it is an inbound file, or SFTP folder path if it is an outbound file. We will use the same folder name as point 4 above.

6. Archived/Copy with Timestamps required? Yes or No? Should the files be archived/copied and/or timestamped.

7. Archived Destination Path: If answered Yes to point 6 above, where should file be archived/copied to? E.g. Datafolder\Export\BI\Archive

8. Filename: name of file to be transferred. E.g. BI-outbound.csv (see point 9 below - This might be wildcarded).

9. Filter: - BI-outbound*.csv (the asterisk ensures the correct files are transferred)

FYI: These are the examples of the actual path locations.
Data folder path:
\\data-folders.services.pgol\Datafolders\1000\PG1000NZ\Import\IntegrationName
SFTP server path:
\\sftp-files.services.pgol\FTP\1000\NZ\Import\IntegrationName

Once you have the SFTP account credentials and the automation is setup in the online environment, use the information below to continue the integration setup.

General SFTP details

Connecting to SFTP with your PayGlobal account

Access with your PayGlobal account is only recommended for access as a person completing a manual payroll process. For automated file upload and download processes, an integration SFTP account should be used. Connecting to SFTP with an Integration account

Access to your files via SFTP can be set up by sending a request to MYOB PayGlobal support, with the directories you need access to. Once you have access, connect with one of the following methods:

With a web browser

1. Go to: https://ftp.myobpayglobal.com/

2. Enter your username (usually Firstname.Lastname)

3. Enter your MYOB PayGlobal Portal Password

4. Once signed in, click on Account in the left tab, then click ‘Enable 2 Factor’.

   1. You will see a DUO Push for Cerberus appear, accept it to complete your sign up.

With an SFTP client

1. Connect to: ftp.myobpayglobal.com:22

2. Username: Firstname.Lastname

3. Password: Your MYOB PayGlobal Portal Password

Connecting to SFTP with an Integration account

Access with a generic integration SFTP account is only recommended for automated processes. For a user performing manual uploads or downloads, logging in with your PayGlobal account is recommended. Connecting to SFTP with your PayGlobal account

SSH keys are required to authenticate automated access accounts.

To generate SSH keys, please see this guide: Generating SSH keys.

To set up an SFTP account for automated access, please contact your MYOB PayGlobal consultant or MYOB PayGlobal support, and provide them your public SSH key.

Once you’ve received the integration account username, connect to ftp.myobpayglobal.com:22 with the provided username and use your private SSH key to authenticate.
When prompted, enter the passphrase for your SSH key.

FTP is deprecated as it is insecure; connections can only be made with SFTP on port 22.

Using arbitrary ports for SFTP is also not supported.

Setting up encryption to MYOB

If you require your data to be encrypted going into the MYOB environment, please encrypt your data with the below public key.

Once you have encrypted the file, you’ll be unable to decrypt it.
Decryption can only be done by the MYOB private key. 

MYOBPayGlobalOnline_public.asc

Great! Now you can transfer your encrypted files to your SFTP, and we will decrypt them and move them into PayGlobal once they are received.

Setting up encryption from MYOB

If you require your data to be encrypted coming out from the MYOB environment, you will need to provide your own public key.

Once MYOB has encrypted the file with your public key, we and others will be unable to decrypt it. Decryption can only be done with your generated private key.

If you already have a public GPG key please share it with your MYOB PayGlobal consultant or MYOB PayGlobal support who will organise the encryption.

To generate your own GPG keys please see this guide: Generating GPG keys

Great! Now the files we make available to pick up, or the files we place on your SFTP server will be encrypted! Use your GPG private key to decrypt the files and use it for your upstream process.

Additional information

SFTP infrastructure info: https://enterprise-support.myob.com/payglobal/firewall-changes
File types that can be transferred: https://enterprise-support.myob.com/payglobal/limited-file-types-using-ftp-transfer