Secure URL submissions require both the password and the username.
I tried your suggestion about using username and password in the URL.
It still doesn't work. In the field box, it shows:
I suspect it is because there is no association for an application to handle "sftp" protocol set up on my Windows 7 system.
I found this web page for how to set up default programs to handle specific protocols:
But this is much to complicated for a non-technical person (my client) to implement.
Any ideas? Perhaps an executable script to set up the association?