Login user in Confluence from external site

[Dinu-Iulian Popovici]

Hi. 

We have a Confluence installation (cloud version) where we have a couple of private spaces (3 groups). Let's take the following example: Admin, Manager, User (group). Depending on your user level you can see spaces/pages or not. 

We have a website where users can be either an admin, manager or user. I'd like to redirect my users to the Confluence space depending on their permissions. 

What I had in mind: Create 3 confluence users (one for every group, example: admin@mywebsite.com) with a random password. But I'd like to open Confluence in an iframe (or new page) and automatically log them in depending on their role in my website.

Example: If i'm an admin on my website I want to open the Confluence space for admins. I looked at the REST API, but that retrieves content and I wouldn't want to build a custom solution on my website to show the content. 

Any ideas on how this could be achieved?

[Stephen Sifers]

Hello Iulian,

If you’re wanting users to access your website then be directed to Confluence and auto login then it sounds like you’re wanting to use Confluence SAML authentication. You could also utilize the Confluence REST API to precheck if a user is a member of any group and then redirect them accordingly.

For more information on the SAML piece, please see SAML single sign-on.

For the REST API aspect, the endpoint I would suggest using would be GET /wiki/rest/api/user/memberof.

I hope this provides some guidance on how to authenticate to Confluence and redirect based on user group membership.

Regards,
Stephen Sifers