Confluence space permissions derived from Okta?

Randy O'Neal

We have an Okta security setup which I need to use to manage access to a Confluence space dedicated to system documentation.  In some cases, we have Active Directory (AD) users, while others are Universal Directory (UD) users.  I need to restrict specific pages to the Okta roles.  For example, UD users shouldn't have access to certain Confluence pages which AD users should have.

I'm in need of guidance regarding how I bridge Okta to Confluence space permissions.  Can anyone point me in the right direction?

Jim Knepley - ReleaseTEAM

Hi @Randy O'Neal 

I think you're looking for Okta's "group attribute statements" that optionally include user groups in the SAML assertion. It's configured in the SAML application's settings in the Okta Admin console.

That way, user membership in specified AD groups is passed to the application, which can then use them for whatever, like permissions to pages and such.