Confluence Integration

Learn how to integrate Confluence with Sprinto to automate access reviews and policy evidence collection using OAuth or API-based authentication.

Overview

The Confluence integration allows you to automate evidence collection for:

• Access Reviews — Monitor user access, roles, and authentication controls

• Policy Checks — Validate policy-related configurations and documentation

Sprinto supports multiple authentication methods depending on the use case:

• OAuth 2.0 (recommended for Access Reviews)

• OAuth 2.0 Client Credentials

• API Token-based authentication (used for Policy checks)

---

How It Works

Once connected, Sprinto securely fetches user, group, and configuration data from Confluence to evaluate compliance controls.

• For Access Reviews, Sprinto retrieves:

  • Users and roles

  • Group memberships

  • MFA (2FA) status

• For Policy checks, Sprinto retrieves:

  • Confluence pages and related metadata

Sprinto continuously syncs this data and evaluates it against mapped compliance controls.

Sprinto checks for Confluence integration

Following are the available Sprinto checks for various Confluence integration types:

Policies management

Sprinto check	Reference procedure
Document should be set up	The following Sprinto check starts failing if there is no document set up on the Sprinto account. How to fix: To pass this Sprinto check, you can set up the required policies per your activated framework.

Access review

Sprinto check	Reference procedure
Confluence access should be removed for offboarded user	How to fix
User should be identified	How to fix
User access to critical system should be valid	How to fix

Permissions Required

Access Review (OAuth-based)

When using OAuth 2.0, Sprinto requests the following scopes:

• offline_access — Maintain persistent access without repeated authentication

• read:confluence-user — Read user details

• read:confluence-groups — Read group memberships

• read:content-details:confluence — Access content metadata

These permissions enable Sprinto to assess user access and enforce access-related controls.

---

Policy Checks (API Token-based)

For policy validation, Sprinto uses an API token with:

• Full read access to Confluence content

This allows Sprinto to:

• Fetch pages

• Validate presence and structure of policy documentation

---

Supported Authentication Methods

Use Case	Authentication Method
Access Review	OAuth 2.0 (Recommended)
Access Review	OAuth 2.0 Client Credentials
Policy Checks	API Token

---

Setup Instructions

Step 1: Navigate to Integration

1. Log in to the Sprinto dashboard.

2. Go to Settings → Integrations.

3. Search for Confluence.

4. Click Connect.

---

Step 2: Choose Integration Type

You will see two options:

• Access Review

• Policy

You can set up one or both based on your requirements.

---

Set Up Access Review

Option 1: OAuth 2.0 (Recommended)

1. Click Connect under Access Review.

2. Review permissions and click Next.

1. Select the I have admin access to my Confluence account check box.

2. Click Connect to Confluence.

1. Select OAuth 2.0.

1. Review the permissions required.

2. Click Connect.

1. Log in via Atlassian and grant access.

2. Complete the connection.

---

Option 2: OAuth 2.0 Client Credentials

1. Click Connect under Access Review.

2. Select OAuth 2.0 Client Credentials.

3. Enter your Client ID & Client Secret. Know more about where you can find this information.

1. Click Connect.

---

Set Up Policy Integration

Step 1: Generate API Token

1. Go to Atlassian API Tokens.

2. Click Create API token.

3. Enter a label (for example, Sprinto API Token).

4. Copy the generated token.

---

Step 2: Connect in Sprinto

1. Follow these steps to navigate to Confluence Integration.

2. Click Connect under Policy.

3. Review permissions and click Next.

1. Select the I have the credentials check box.

2. Click Connect Confluence.

1. Enter:

   • Confluence domain (for example, yourcompany.atlassian.net)

   • Username (email)

   • API token

2. Click Connect Confluence.

3. Refer to sync documents from Confluence for detailed instructions.

---

Post-Connection Setup

After successfully connecting Confluence:

For Access Review

1. Navigate to Access → Overview.

2. Click Add Critical System.

3. Search for Confluence.

4. Add the system to begin monitoring.

---

Sync and Evaluation

• Initial data sync may take a few hours

• Controls are evaluated automatically after sync

• Evidence is refreshed periodically based on monitoring schedules

---

Support

Please contact Sprinto Support If you have any queries related to the integration or need any assistance.