# Confluence Integration

### Overview

The Confluence integration allows you to automate evidence collection for:

* **Access Reviews** — Monitor user access, roles, and authentication controls
* **Policy Checks** — Validate policy-related configurations and documentation

Sprinto supports multiple authentication methods depending on the use case:

* OAuth 2.0 (recommended for Access Reviews)
* OAuth 2.0 Client Credentials
* API Token-based authentication (used for Policy checks)

***

### How It Works

Once connected, Sprinto securely fetches user, group, and configuration data from Confluence to evaluate compliance controls.

* For **Access Reviews**, Sprinto retrieves:
  * Users and roles
  * Group memberships
  * MFA (2FA) status
* For **Policy checks**, Sprinto retrieves:
  * Confluence pages and related metadata

Sprinto continuously syncs this data and evaluates it against mapped compliance controls.

#### Sprinto checks for Confluence integration

Following are the available Sprinto checks for various Confluence integration types:

Policies management

<table><thead><tr><th width="148.1875">Sprinto check</th><th>Reference procedure</th></tr></thead><tbody><tr><td>Document should be set up</td><td><p>The following Sprinto check starts failing if there is no document set up on the Sprinto account.</p><p><strong>How to fix</strong>: To pass this Sprinto check, you can set up the required policies per your activated framework.</p></td></tr></tbody></table>

Access review

<table><thead><tr><th width="474.140625">Sprinto check</th><th width="186.0859375">Reference procedure</th></tr></thead><tbody><tr><td>Confluence access should be removed for offboarded user</td><td><a href="../../data-library/access/dashboard-actions/view-and-map-staff-access">How to fix</a></td></tr><tr><td>User should be identified</td><td><a href="../../dashboard/user-management">How to fix</a></td></tr><tr><td>User access to critical system should be valid</td><td><a href="../../data-library/access/dashboard-actions/view-and-map-staff-access">How to fix</a></td></tr></tbody></table>

### Permissions Required

#### Access Review (OAuth-based)

When using OAuth 2.0, Sprinto requests the following scopes:

* `offline_access` — Maintain persistent access without repeated authentication
* `read:confluence-user` — Read user details
* `read:confluence-groups` — Read group memberships
* `read:content-details:confluence` — Access content metadata

These permissions enable Sprinto to assess user access and enforce access-related controls.

***

#### Policy Checks (API Token-based)

For policy validation, Sprinto uses an API token with:

* **Full read access** to Confluence content

This allows Sprinto to:

* Fetch pages
* Validate presence and structure of policy documentation

***

### Supported Authentication Methods

<table><thead><tr><th width="174.28125">Use Case</th><th width="265.7265625">Authentication Method</th></tr></thead><tbody><tr><td>Access Review</td><td>OAuth 2.0 (Recommended)</td></tr><tr><td>Access Review</td><td>OAuth 2.0 Client Credentials</td></tr><tr><td>Policy Checks</td><td>API Token</td></tr></tbody></table>

***

### Setup Instructions

#### Step 1: Navigate to Integration

1. Log in to the Sprinto dashboard.
2. Go to **Settings → Integrations.**
3. Search for **Confluence.**
4. Click **Connect.**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FoxUZy79cKKG8UTEPXqTo%2FScreenshot%202026-03-27%20at%2015.09.40.png?alt=media&#x26;token=79c7f30e-e6ea-48c3-9e58-0d0dae52b6cf" alt="" width="563"><figcaption></figcaption></figure>

***

#### Step 2: Choose Integration Type

You will see two options:

* **Access Review**
* **Policy**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2F4lB7HNbXEWF3AtDmJMPK%2FScreenshot%202026-03-27%20at%2015.10.38.png?alt=media&#x26;token=6bcc0b7c-9ad4-4245-afb2-40022ee7ba39" alt="" width="375"><figcaption></figcaption></figure>

You can set up one or both based on your requirements.

***

### Set Up Access Review

#### Option 1: OAuth 2.0 (Recommended)

1. Click **Connect** under Access Review.
2. Review permissions and click **Next.**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FpekPmpgmn2H4RyIZZW0m%2FScreenshot%202026-03-27%20at%2015.11.26.png?alt=media&#x26;token=551dea64-5da8-436f-9a39-455ccb8da6ec" alt="" width="375"><figcaption></figcaption></figure>

3. Select the **I have admin access to my Confluence account** check bo&#x78;**.**
4. Click **Connect to Confluence**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FtxS0HMvZQI1XleMu5F4G%2FScreenshot%202026-03-27%20at%2015.14.42.png?alt=media&#x26;token=ee58b572-2e74-4b03-aaf5-77bef6006471" alt="" width="375"><figcaption></figcaption></figure>

5. Select **OAuth 2.0.**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FRLldjFp3C5vXjouXPmNA%2FScreenshot%202026-03-27%20at%2015.15.28.png?alt=media&#x26;token=4c8cb67e-7469-4e5a-8bd0-b379d0140a22" alt="" width="333"><figcaption></figcaption></figure>

6. Review the permissions required.
7. Click **Connect**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FbtwLSj8Qnyts7I2KbX8O%2FScreenshot%202026-03-27%20at%2015.17.02.png?alt=media&#x26;token=de95a698-f061-4aa5-b890-31b2a3cef9c7" alt="" width="326"><figcaption></figcaption></figure>

8. Log in via Atlassian and grant access.
9. Complete the connection.

***

#### Option 2: OAuth 2.0 Client Credentials

1. Click **Connect** under Access Review.
2. Select **OAuth 2.0 Client Credentials.**
3. Enter your Client ID & Client Secret. [Know more](https://truto.notion.site/Confluence-321ac512f5a580c3a07cd114f693b807) about where you can find this information.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FL81IQOmn2NAxJgpfbqPg%2FScreenshot%202026-03-27%20at%2015.18.24.png?alt=media&#x26;token=187dfbc6-95e1-430a-b03d-28d2efd905b0" alt="" width="329"><figcaption></figcaption></figure>

4. Click **Connect.**

***

### Set Up Policy Integration

#### Step 1: Generate API Token

1. Go to **Atlassian API Tokens.**
2. Click **Create API token.**
3. Enter a label (for example, *Sprinto API Token*).
4. Copy the generated token.

***

#### Step 2: Connect in Sprinto

1. Follow [these steps](#step-1-navigate-to-integration) to navigate to Confluence Integration.&#x20;
2. Click **Connect** under Policy.
3. Review permissions and click **Next.**

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FH6hhYBNy0b0a7Y1l9bcT%2FScreenshot%202026-03-27%20at%2015.31.36.png?alt=media&#x26;token=d0421d52-8ea1-4515-aaf6-46f1337eb9a7" alt="" width="375"><figcaption></figcaption></figure>

4. Select the **I have the credentials** check box.
5. Click **Connect Confluence**.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2FoAPBWKmJwaPjNNUbtOQv%2FScreenshot%202026-03-27%20at%2015.33.18.png?alt=media&#x26;token=23723e10-bfe6-4981-97da-eaea592e4cf8" alt="" width="375"><figcaption></figcaption></figure>

4. Enter:
   * **Confluence domain** (for example, `yourcompany.atlassian.net`)
   * **Username (email)**
   * **API token**
5. Click **Connect Confluence.**
6. Refer to [sync documents from Confluence](https://docs.sprinto.com/policies/dashboard-actions/sync-policies-and-documents-from-confluence) for detailed instructions.

<figure><img src="https://3220032727-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEsyn5VMU6e0OyGjRtKgx%2Fuploads%2F1zldQYp5TMi3ZKF3e9JO%2FScreenshot%202026-03-27%20at%2015.34.04.png?alt=media&#x26;token=670ed94b-ab5d-4c36-aa91-fc0dac8324ca" alt="" width="375"><figcaption></figcaption></figure>

***

### Post-Connection Setup

After successfully connecting Confluence:

#### For Access Review

1. Navigate to **Access → Overview.**
2. Click **Add Critical System.**
3. Search for **Confluence.**
4. Add the system to begin monitoring.

***

#### Sync and Evaluation

* Initial data sync may take a few hours
* Controls are evaluated automatically after sync
* Evidence is refreshed periodically based on monitoring schedules

***

### Support

Please contact [Sprinto Support](mailto:www.support@sprinto.com) If you have any queries related to the integration or need any assistance.