Citrix ShareFile
Connect Citrix ShareFile to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Citrix ShareFile to collect cloud storage provider evidence with automated compliance tests, switched on per workspace.
| Category | Cloud Storage Provider |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Citrix ShareFile's guide | api.sharefile.com |
Connect with an API token
-
In Citrix ShareFile:
- Request a ShareFile OAuth2 client ID and secret by completing and submitting the request form on ShareFile's API keys page (https://secure.sharefile.com/apikeys).
- Obtain an access token from https://{subdomain}.{apicp}/oauth/token, using the authorization code flow or the password grant for console and non-web clients.
- Copy the access_token from the response. It expires after expires_in seconds; refresh it at the same endpoint with grant_type=refresh_token.
Where to find the other values:
- Subdomain: Your ShareFile subdomain, for example mycompany in https://mycompany.sharefile.com; the token response also returns it as subdomain.
- Region (optional): The apicp value in the token response: your ShareFile API control plane, for example sharefile.com or securevdr.com.
Citrix ShareFile issues this credential through its API or its support team, not through its admin screens.
ShareFile issues API client credentials through a request form, and access tokens through its OAuth2 API, not a self-service UI. Tokens expire, so a pasted access token stops working after expires_in seconds. Which ShareFile permissions are needed to list all users was not sourced (the Users reference page read was only an index).
Source: api.sharefile.com, api.sharefile.com, checked 2026-10-07.
The permissions Safeguard needs:
AdminManageEmployees. Citrix ShareFile shows the full user list only to administrators, so this credential must belong to one. Safeguard only reads with it. -
On Compliance › Connectors, open Citrix ShareFile, click Connect, choose API token and fill in:
Field What to enter Subdomain Required. The part before .sharefile.com in your address. Access token Required. Stored encrypted and never shown again. Region (optional) — -
Click Connect with token.
Frameworks
Safeguard's automated tests read Citrix ShareFile and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.2, CC6.3 | 3 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.6.5, A.8.2 | 3 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4) | 3 |
| PCI DSS | Automated tests | 7.2.2, 7.2.4, 8.2.5 | 3 |
| NIST CSF 2.0 | Automated tests | PR.AA-01, PR.AA-05 | 3 |
These tests are switched on per workspace by the Safeguard team.
Related
- Cloud Storage Provider connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks