Configuration Guide
Setup
Setup
Overview
The Confluence connector provides access to your organization’s Confluence Cloud workspace through OAuth 2.0 (3LO) authentication. It syncs spaces, pages, blog posts, comments, attachments, and user information, enabling comprehensive knowledge base search and access across your Confluence content.Authentication
The Confluence connector uses OAuth 2.0 with 3-legged OAuth (3LO) for secure authentication. This allows users to authorize the connector to access Confluence data on their behalf while maintaining fine-grained control over permissions through Atlassian’s granular API scopes.How to configure and enable the Confluence Connector
Step 1: Access Atlassian Developer Console
-
Navigate to the Developer Console:
Go to developer.atlassian.com/console/myapps/ and sign in with your Atlassian account that has administrator access to your Confluence workspace. - View Your Apps: You’ll see the “My apps” page where you can create and manage OAuth 2.0 integrations.

Step 2: Create a New OAuth 2.0 Integration
- Click the “Create” button in the top right corner
- Select “OAuth 2.0 integration” from the dropdown menu
- Fill in the application details:
- Name: Enter a meaningful name (e.g., “PipesHub Confluence Connector”)
- Check the box to agree to Atlassian’s developer terms
- Click “Create” to proceed

OAuth 2.0 (3LO) integrations use rotating refresh tokens by default, which improves security by limiting token validity and enabling automatic detection of refresh token reuse.
Step 3: Review Application Overview
After creation, you’ll be taken to the app overview page. This page displays:- App ID: Your application’s unique identifier
- Distribution status: Whether the app is shared publicly
- Permissions: API scopes configured for the app
- Authorization: OAuth 2.0 (3LO) authorization settings

Step 4: Configure OAuth 2.0 Authorization
- In the left sidebar, click “Authorization”
- Find “OAuth 2.0 (3LO)” in the authorization types list
- Click “Add” to enable OAuth 2.0 authorization for your app

- Set the Callback URL:
- You need to enter the redirect URI provided by PipesHub
- To get this URL, open PipesHub in another tab, navigate to Settings → Connectors, find the Confluence connector, and click “Configure”
- Copy the Redirect URI shown in the configuration dialog:

- Paste the copied Redirect URI into the Callback URL field in Atlassian Developer Console
- Click “Save changes”

Step 5: Add API Permissions
- In the left sidebar, click “Permissions”
- You’ll see a list of available Atlassian APIs
- Add scopes for both User identity API and Confluence API

User Identity API Scopes
Click “Add” next to User identity API and select the following scope:read:account- View user profiles (required for user identification)

Confluence API Scopes
Click “Add” next to Confluence API. You’ll see two tabs: “Classic scopes” and “Granular scopes”. You need to configure scopes from both tabs.Classic Scopes
First, select the “Classic scopes” tab and add the following scopes:| Scope | Description |
|---|---|
read:confluence-content.all | Read all Confluence content |
read:confluence-content.summary | Read Confluence content summaries |
read:confluence-props | Read Confluence content properties |
read:confluence-space.summary | Read Confluence space summaries |
read:confluence-user | Read Confluence user information |
read:confluence-groups | Read Confluence group information |
search:confluence | Search Confluence content |
Classic scopes provide broader access patterns and are required for certain API endpoints. Some features may not work correctly without these scopes enabled.
Granular Scopes
Next, select the “Granular scopes” tab and add the following read permissions for more fine-grained access control:| Scope | Description |
|---|---|
read:content-details:confluence | View content details and properties |
read:page:confluence | View page content |
read:blogpost:confluence | View blog post content |
read:attachment:confluence | View and download attachments |
read:comment:confluence | View comments on pages and blog posts |
read:space:confluence | View space details |
read:user:confluence | View user details |
read:group:confluence | View groups and memberships |
read:permission:confluence | View content restrictions and permissions |
read:audit-log:confluence | View audit records |
read:folder:confluence | View folder data |
read:email-address:confluence | View user email addresses |


Atlassian recommends not adding more than 50 scopes to your app. Both Classic and Granular scopes are required for full connector functionality. Classic scopes provide broad access while Granular scopes enable fine-grained permissions for specific API operations.
Step 6: Get OAuth 2.0 Credentials
- In the left sidebar, click “Settings”
- Scroll down to the “Authentication details” section
- Copy the following credentials:
- Client ID: Your app’s unique identifier
- Secret: Your app’s client secret (click the copy button)

Step 7: Configure Connector in PipesHub
- Return to the PipesHub Confluence configuration dialog (if you closed it, navigate to Settings → Connectors and click “Configure” on the Confluence connector)
-
The configuration dialog has two steps:
- Step 1: Authentication - Enter OAuth credentials
- Step 2: Sync Settings - Configure synchronization
- Verify the Redirect URI displayed matches the callback URL you configured in Atlassian Developer Console (Step 4)
-
Enter your OAuth 2.0 credentials:
- Client ID: From Step 6
- Client Secret: From Step 6

- Click “Next” to proceed to authentication
Step 8: Authorize the Connection
- After saving the configuration, click “Authenticate” from the Quick Actions panel
- You’ll be redirected to Atlassian’s authorization page
- Select your Confluence site from the dropdown menu

- Review the permissions being requested by the connector
- Click “Accept” to grant access

The authorization page shows all the Confluence and User permissions your connector will have. Review these carefully before accepting to ensure they align with your data access requirements.
- You’ll be redirected back to PipesHub with a success message
- The connector status will update to show “Authenticated”

Step 9: Configure Sync Settings
- After successful authentication, configure your sync preferences:
- Sync Strategy: Choose between “Scheduled” or “Manual”
- Timezone: Select your preferred timezone for scheduled syncs
- Sync Interval: Choose how often to sync (e.g., 1 hour, 6 hours, 24 hours)

- Click “Save Configuration” to save your settings
Scheduled sync runs automatically at the specified intervals, keeping your data up-to-date without manual intervention. Manual sync requires you to trigger synchronization on-demand.
Step 10: Configure Filters (Optional)
Filters allow you to control what data is synced and indexed from your Confluence workspace.
Sync Filters
Sync filters determine which content is downloaded from Confluence. Data excluded by sync filters is never downloaded.Available Sync Filters:-
Space Keys - Filter by Confluence spaces
- Operator:
In(include only) orNot In(exclude) - Value: Enter one or more space keys (e.g.,
ENG,MKT,PROD) - Note: Space keys are case-sensitive
- Finding Space Keys: Check your space URL -
https://yourinstance.atlassian.net/wiki/spaces/SPACEKEY/overview- theSPACEKEYis what you need
- Operator:
-
Page IDs - Filter specific pages (includes all child pages automatically)
- Operator:
In(include) orNot In(exclude) - Value: Enter one or more page IDs (e.g.,
88375321,90341377) - Note: When you specify a parent page, all its child pages are automatically included
- Finding Page IDs: Check your page URL -
https://yourinstance.atlassian.net/wiki/spaces/SPACE/pages/88375321/Page+Title- the number after/pages/is the page ID
- Operator:
-
Blogpost IDs - Filter specific blogposts
- Operator:
InorNot In - Value: Enter one or more blogpost IDs
- Finding Blogpost IDs: Check your blogpost URL -
https://yourinstance.atlassian.net/wiki/spaces/SPACE/blog/2024/12/09/12345678/Blog+Title- the number after/blog/YYYY/MM/DD/is the blogpost ID
- Operator:
-
Modified Date - Filter by last modification date
- Operators:
Is After,Is Before, orIs Between - Use case: Sync only recently updated content (e.g., content modified in the last 6 months)
- Operators:
-
Created Date - Filter by creation date
- Operators:
Is After,Is Before, orIs Between - Use case: Sync only newly created content or exclude legacy documentation
- Operators:
Indexing Filters
Indexing filters control what synced data gets processed for AI search. All data is synced, but only enabled content types are indexed.Available Indexing Filters:-
Pages Section:
- Index Pages (default: enabled)
- Index Page Attachments (default: enabled)
- Index Page Comments (default: enabled)
-
Blogposts Section:
- Index Blogposts (default: enabled)
- Index Blogpost Attachments (default: enabled)
- Index Blogpost Comments (default: enabled)
- Sync only Engineering space: Space Keys → Operator:
In, Value:ENG - Exclude archived spaces: Space Keys → Operator:
Not In, Value:ARCHIVE, OLD - Sync specific documentation tree: Page IDs → Operator:
In, Value:88375321 - Recent content only: Modified Date → Operator:
Is After, Date:2024-06-01 - Index pages but not attachments: Disable “Index Page Attachments” toggle
Filters can be configured during initial setup or modified later. Changes to filters will take effect on the next sync.
Step 11: Enable the Connector
- After configuration is complete, toggle the connector status to “Enable”
- You can do this by:
- Using the toggle switch next to “Connector Status”
- Or clicking “Enable” in the Quick Actions panel

- The connector will verify credentials and begin initial synchronization
- Wait for the status to show “Active” or “Syncing”
- Monitor the Indexing Progress to track sync completion
Supported Features
The Confluence connector syncs the following data from your Confluence Cloud workspace:- Spaces: All accessible spaces and their configurations
- Pages: Full page content with formatting preserved
- Blog Posts: All blog post content and metadata
- Comments: Comments on pages and blog posts
- Attachments: Files attached to pages and blog posts
- Users: User profiles and account information
- Groups: User groups and memberships
- Permissions: Content restrictions and space permissions
- Folders: Folder structure and organization
- Audit Logs: Activity records for compliance
Data Sync Behavior
Initial Sync
- Fetches all accessible content from connected Confluence spaces
- Indexes pages, blog posts, attachments, and comments
- Respects user permissions for content visibility
- Duration depends on the size of your Confluence workspace
Incremental Sync
- Uses timestamp-based synchronization to detect changes
- Only syncs new or modified content since last sync
- Efficiently handles additions, updates, and deletions
- Reduces API calls and sync duration
Permission Handling
- Syncs content based on the authenticating user’s permissions
- Each user sees only content they have access to in Confluence
- Respects space permissions and page restrictions
- Maintains Confluence’s access control model
Troubleshooting
Common Issues
Invalid client credentials error:- Verify Client ID and Client Secret are correct
- Ensure you copied the full values without extra spaces
- Check that the OAuth app is active in Atlassian Developer Console
- Regenerate the secret if necessary and update PipesHub
- Ensure the Redirect URI in PipesHub exactly matches the callback URL in Atlassian
- Check for trailing slashes or protocol differences (http vs https)
- Update both configurations to use the same URL
- Verify you’re signing in with an account that has Confluence access
- Ensure your Confluence site is selected during authorization
- Check that all required API scopes are configured
- Verify the connector status shows “Active”
- Check that the authenticating user has access to Confluence content
- Ensure spaces are not restricted or archived
- Review sync logs for specific error messages
- OAuth 2.0 tokens may expire based on Atlassian’s policies
- Disable and re-enable the connector to re-authenticate
- Check if the OAuth app is still active in Developer Console
- Verify the authenticating user has read access to the content
- Check space permissions in Confluence
- Review page restrictions that may limit access
Confluence Cloud Compatibility
This connector is designed for Confluence Cloud and uses Atlassian’s REST API v2. It supports all current Confluence Cloud features and is regularly updated for compatibility with Atlassian’s API changes.This connector does not support Confluence Data Center or Confluence Server (on-premise deployments). Only Confluence Cloud workspaces can be connected.
Useful Links
- Atlassian Developer Console: developer.atlassian.com/console/myapps/
- OAuth 2.0 (3LO) Documentation: developer.atlassian.com/cloud/confluence/oauth-2-3lo-apps/
- Confluence API Scopes Reference: developer.atlassian.com/cloud/confluence/scopes/
Ready to Get Started?
Connect your Confluence workspace to PipesHub in just a few minutes. Follow the step-by-step guide above to enable organization-wide knowledge search and access across all your Confluence content.














