> For the complete documentation index, see [llms.txt](https://docs.sprinto.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sprinto.com/integrations/overview/confluence-integration.md).

# Confluence Integration

### Overview

The Confluence integration allows you to automate evidence collection for:

* **Access Reviews** — Monitor user access, roles, and authentication controls
* **Policy Checks** — Validate policy-related configurations and documentation

Sprinto supports multiple authentication methods depending on the use case:

* OAuth 2.0 (recommended for Access Reviews)
* OAuth 2.0 Client Credentials
* API Token-based authentication (used for Policy checks)

***

### How It Works

Once connected, Sprinto securely fetches user, group, and configuration data from Confluence to evaluate compliance controls.

* For **Access Reviews**, Sprinto retrieves:
  * Users and roles
  * Group memberships
  * MFA (2FA) status
* For **Policy checks**, Sprinto retrieves:
  * Confluence pages and related metadata

Sprinto continuously syncs this data and evaluates it against mapped compliance controls.

#### Sprinto checks for Confluence integration

Following are the available Sprinto checks for various Confluence integration types:

Policies management

<table><thead><tr><th width="148.1875">Sprinto check</th><th>Reference procedure</th></tr></thead><tbody><tr><td>Document should be set up</td><td><p>The following Sprinto check starts failing if there is no document set up on the Sprinto account.</p><p><strong>How to fix</strong>: To pass this Sprinto check, you can set up the required policies per your activated framework.</p></td></tr></tbody></table>

Access review

<table><thead><tr><th width="474.140625">Sprinto check</th><th width="186.0859375">Reference procedure</th></tr></thead><tbody><tr><td>Confluence access should be removed for offboarded user</td><td><a href="/pages/NCqV9BepFyI4nXfJArP4">How to fix</a></td></tr><tr><td>User should be identified</td><td><a href="/pages/hT3FpQUpvxrGn7RvWYKN">How to fix</a></td></tr><tr><td>User access to critical system should be valid</td><td><a href="/pages/NCqV9BepFyI4nXfJArP4">How to fix</a></td></tr></tbody></table>

### Permissions Required

#### Access Review (OAuth-based)

When using OAuth 2.0, Sprinto requests the following scopes:

* `offline_access` — Maintain persistent access without repeated authentication
* `read:confluence-user` — Read user details
* `read:confluence-groups` — Read group memberships
* `read:content-details:confluence` — Access content metadata

These permissions enable Sprinto to assess user access and enforce access-related controls.

***

#### Policy Checks (API Token-based)

For policy validation, Sprinto uses an API token with:

* **Full read access** to Confluence content

This allows Sprinto to:

* Fetch pages
* Validate presence and structure of policy documentation

***

### Supported Authentication Methods

<table><thead><tr><th width="174.28125">Use Case</th><th width="265.7265625">Authentication Method</th></tr></thead><tbody><tr><td>Access Review</td><td>OAuth 2.0 (Recommended)</td></tr><tr><td>Access Review</td><td>OAuth 2.0 Client Credentials</td></tr><tr><td>Policy Checks</td><td>API Token</td></tr></tbody></table>

***

### Setup Instructions

#### Step 1: Navigate to Integration

1. Log in to the Sprinto dashboard.
2. Go to **Settings → Integrations.**
3. Search for **Confluence.**
4. Click **Connect.**

<figure><img src="/files/tfJao5cP6WQLOiTsRbtr" alt="" width="563"><figcaption></figcaption></figure>

***

#### Step 2: Choose Integration Type

You will see two options:

* **Access Review**
* **Policy**

<figure><img src="/files/3Tna8og6lvCFKsjDKDGe" alt="" width="375"><figcaption></figcaption></figure>

You can set up one or both based on your requirements.

***

### Set Up Access Review

#### Option 1: OAuth 2.0 (Recommended)

1. Click **Connect** under Access Review.
2. Review permissions and click **Next.**

<figure><img src="/files/7YUUQhFu3M1Ez7NaidsX" alt="" width="375"><figcaption></figcaption></figure>

3. Select the **I have admin access to my Confluence account** check bo&#x78;**.**
4. Click **Connect to Confluence**.

<figure><img src="/files/6rRdTZcf1mZJVk3eWxPt" alt="" width="375"><figcaption></figcaption></figure>

5. Select **OAuth 2.0.**

<figure><img src="/files/XtM2kChwtpU5Q5hMrlGn" alt="" width="333"><figcaption></figcaption></figure>

6. Review the permissions required.
7. Click **Connect**.

<figure><img src="/files/wIG0xRtM9JDAfjDP10WQ" alt="" width="326"><figcaption></figcaption></figure>

8. Log in via Atlassian and grant access.
9. Complete the connection.

***

#### Option 2: OAuth 2.0 Client Credentials

1. Click **Connect** under Access Review.
2. Select **OAuth 2.0 Client Credentials.**
3. Enter your Client ID & Client Secret. [Know more](https://truto.notion.site/Confluence-321ac512f5a580c3a07cd114f693b807) about where you can find this information.

<figure><img src="/files/uasTR0tZwVkbi1eQZzNF" alt="" width="329"><figcaption></figcaption></figure>

4. Click **Connect.**

***

### Set Up Policy Integration

#### Step 1: Generate API Token

1. Go to **Atlassian API Tokens.**
2. Click **Create API token.**
3. Enter a label (for example, *Sprinto API Token*).
4. Copy the generated token.

***

#### Step 2: Connect in Sprinto

1. Follow [these steps](#step-1-navigate-to-integration) to navigate to Confluence Integration.&#x20;
2. Click **Connect** under Policy.
3. Review permissions and click **Next.**

<figure><img src="/files/CE6RXx5n54LdTPj8v9Cy" alt="" width="375"><figcaption></figcaption></figure>

4. Select the **I have the credentials** check box.
5. Click **Connect Confluence**.

<figure><img src="/files/tYlDQqmt4Paq45aKg6Cn" alt="" width="375"><figcaption></figcaption></figure>

4. Enter:
   * **Confluence domain** (for example, `yourcompany.atlassian.net`)
   * **Username (email)**
   * **API token**
5. Click **Connect Confluence.**
6. Refer to [sync documents from Confluence](/policies/dashboard-actions/sync-policies-and-documents-from-confluence.md) for detailed instructions.

<figure><img src="/files/KB7XyoawFK3IYIxNcCVZ" alt="" width="375"><figcaption></figcaption></figure>

***

### Post-Connection Setup

After successfully connecting Confluence:

#### For Access Review

1. Navigate to **Access → Overview.**
2. Click **Add Critical System.**
3. Search for **Confluence.**
4. Add the system to begin monitoring.

***

#### Sync and Evaluation

* Initial data sync may take a few hours
* Controls are evaluated automatically after sync
* Evidence is refreshed periodically based on monitoring schedules

***

### Support

Please contact [Sprinto Support](mailto:www.support@sprinto.com) If you have any queries related to the integration or need any assistance.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sprinto.com/integrations/overview/confluence-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.