Source: https://sprinto-test.docs-staging.pageloop.ai/integrations/overview/confluence-integration

# Confluence Integration

### Overview

The Confluence integration allows you to automate evidence collection for:

- **Access Reviews** — Monitor user access, roles, and authentication controls
- **Policy Checks** — Validate policy-related configurations and documentation

Sprinto supports multiple authentication methods depending on the use case:

- OAuth 2.0 (recommended for Access Reviews)
- OAuth 2.0 Client Credentials
- API Token-based authentication (used for Policy checks)

---

### How It Works

Once connected, Sprinto securely fetches user, group, and configuration data from Confluence to evaluate compliance controls.

- For **Access Reviews**, Sprinto retrieves:
  - Users and roles
  - Group memberships
  - MFA (2FA) status
- For **Policy checks**, Sprinto retrieves:
  - Confluence pages and related metadata

Sprinto continuously syncs this data and evaluates it against mapped compliance controls.

#### Sprinto checks for Confluence integration

Following are the available Sprinto checks for various Confluence integration types:

Policies management

| Sprinto check             | Reference procedure                                                                                                                                                                                              |
| ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Document should be set up | The following Sprinto check starts failing if there is no document set up on the Sprinto account. **How to fix**: To pass this Sprinto check, you can set up the required policies per your activated framework. |

Access review

| Sprinto check                                           | Reference procedure                                                            |
| ------------------------------------------------------- | ------------------------------------------------------------------------------ |
| Confluence access should be removed for offboarded user | [How to fix](/data-library/access/dashboard-actions/view-and-map-staff-access) |
| User should be identified                               | [How to fix](/dashboard/user-management)                                       |
| User access to critical system should be valid          | [How to fix](/data-library/access/dashboard-actions/view-and-map-staff-access) |

### Permissions Required

#### Access Review (OAuth-based)

When using OAuth 2.0, Sprinto requests the following scopes:

- `offline_access` — Maintain persistent access without repeated authentication
- `read:confluence-user` — Read user details
- `read:confluence-groups` — Read group memberships
- `read:content-details:confluence` — Access content metadata

These permissions enable Sprinto to assess user access and enforce access-related controls.

---

#### Policy Checks (API Token-based)

For policy validation, Sprinto uses an API token with:

- **Full read access** to Confluence content

This allows Sprinto to:

- Fetch pages
- Validate presence and structure of policy documentation

---

### Supported Authentication Methods

| Use Case      | Authentication Method        |
| ------------- | ---------------------------- |
| Access Review | OAuth 2.0 (Recommended)      |
| Access Review | OAuth 2.0 Client Credentials |
| Policy Checks | API Token                    |

---

### Setup Instructions

#### Step 1: Navigate to Integration

1. Log in to the Sprinto dashboard.
2. Go to **Settings → Integrations.**
3. Search for **Confluence.**
4. Click **Connect.**

![](/assets/746d0d90c961-screenshot-2026-03-27-at-15.09.40.png)

---

#### Step 2: Choose Integration Type

You will see two options:

- **Access Review**
- **Policy**

![](/assets/11d8d4f78a2f-screenshot-2026-03-27-at-15.10.38.png)

You can set up one or both based on your requirements.

---

### Set Up Access Review

#### Option 1: OAuth 2.0 (Recommended)

1. Click **Connect** under Access Review.
2. Review permissions and click **Next.**

![](/assets/7e4e7c81f4a8-screenshot-2026-03-27-at-15.11.26.png)

3. Select the **I have admin access to my Confluence account** check bo&#x78;**.**
4. Click **Connect to Confluence**.

![](/assets/335654fbc58c-screenshot-2026-03-27-at-15.14.42.png)

5. Select **OAuth 2.0.**

![](/assets/812f35d76b93-screenshot-2026-03-27-at-15.15.28.png)

6. Review the permissions required.
7. Click **Connect**.

![](/assets/209da8230e91-screenshot-2026-03-27-at-15.17.02.png)

8. Log in via Atlassian and grant access.
9. Complete the connection.

---

#### Option 2: OAuth 2.0 Client Credentials

1. Click **Connect** under Access Review.
2. Select **OAuth 2.0 Client Credentials.**
3. Enter your Client ID & Client Secret. [Know more](https://truto.notion.site/Confluence-321ac512f5a580c3a07cd114f693b807) about where you can find this information.

![](/assets/3f59171b2f21-screenshot-2026-03-27-at-15.18.24.png)

4. Click **Connect.**

---

### Set Up Policy Integration

#### Step 1: Generate API Token

1. Go to **Atlassian API Tokens.**
2. Click **Create API token.**
3. Enter a label (for example, _Sprinto API Token_).
4. Copy the generated token.

---

#### Step 2: Connect in Sprinto

1. Follow [these steps](/integrations/overview/confluence-integration#step-1-navigate-to-integration) to navigate to Confluence Integration.&#x20;
2. Click **Connect** under Policy.
3. Review permissions and click **Next.**

![](/assets/f0d67aedff31-screenshot-2026-03-27-at-15.31.36.png)

4. Select the **I have the credentials** check box.
5. Click **Connect Confluence**.

![](/assets/5f09d5ce34bc-screenshot-2026-03-27-at-15.33.18.png)

4. Enter:
   - **Confluence domain** (for example, `yourcompany.atlassian.net`)
   - **Username (email)**
   - **API token**
5. Click **Connect Confluence.**
6. Refer to [sync documents from Confluence](/policies/dashboard-actions/sync-policies-and-documents-from-confluence) for detailed instructions.

![](/assets/dd9c1d7a3016-screenshot-2026-03-27-at-15.34.04.png)

---

### Post-Connection Setup

After successfully connecting Confluence:

#### For Access Review

1. Navigate to **Access → Overview.**
2. Click **Add Critical System.**
3. Search for **Confluence.**
4. Add the system to begin monitoring.

---

#### Sync and Evaluation

- Initial data sync may take a few hours
- Controls are evaluated automatically after sync
- Evidence is refreshed periodically based on monitoring schedules

---

### Support

Please contact [Sprinto Support](mailto:www.support@sprinto.com) If you have any queries related to the integration or need any assistance.
