Skip to main content

​
About Confluence Cloud

The Confluence Cloud connector gathers space, page, and membership data you need for access-review and change-management evidence. The wizard is two parts: first you provide your *.atlassian.net subdomain so Iru can reach https://YOUR_SUBDOMAIN.atlassian.net/wiki/api/v2, then you supply HTTP Basic credentials built from your Atlassian email and API token.

​
How It Works

REST calls use Basic authentication: 
Authorization: Basic base64(email:api_token)
Passwords are not accepted - only API tokens.
DetailValue
CategoryKnowledge management
AuthenticationBasic auth (email + Atlassian API token)
ScopeConfluence Cloud REST API v2 (not Data Center/Server)
Documentation: Basic auth for Confluence Cloud, REST v2 intro, API tokens.

​
Prerequisites

  • Access to the spaces you want evidence from.
  • Your subdomain - the label before .atlassian.net (for example acme when users visit https://acme.atlassian.net/wiki).

​
Connect Confluence Cloud to Iru

Complete this tab before you connect the source in Compliance.
1

Open Atlassian API tokens

In a browser, go to id.atlassian.com/manage/api-tokens while signed in to the same Atlassian account you use for Confluence Cloud.
2

Create an API token

Select Create API token (or Create token). Atlassian may ask you to sign in again or confirm your identity.
3

Name the token

Enter a label such as Iru Compliance so you can revoke the right credential later without guessing.
4

Set expiry

Choose an expiry up to 365 days (Atlassian’s maximum for this token type at the time of writing). Shorter expiries reduce blast radius if a secret leaks.
5

Create and copy the secret

Finish creation and copy the token value once when Atlassian shows it. You will combine it with your Atlassian account email in Iru’s Basic auth step on the Iru Compliance tab.
Continue on the Iru Compliance tab.

​
Troubleshooting

Check pop-up blocker settings for the Iru site and try again.
Refresh the wizard by toggling the source off/on if the deep link expired.
Email must match your Atlassian ID; password field must contain an API token.
Token inherits your space permissions - grant the account access or switch identities.
Double-check the hostname your users rely on - typos break routing immediately.

​
Considerations

Tokens expire yearly: rotate ahead of deadlines.

Tokens expire yearly - rotate ahead of deadlines.

Data Center / Server APIs differ: this connector…

Data Center / Server APIs differ - this connector targets Cloud only.

Sources Management

Browse and manage every Compliance source.

Getting Started With Compliance

Frameworks, actions, and Artifacts.

Iru Overview

How Endpoint, Compliance, and Identity fit together.

Artifacts Management

Upload, review, and organize evidence from sources and actions.