Guidelines for setting anonymous access in Confluence. restricting ip address

Question

Confluence 5.10 server.

we have confluence limited to IT dept. we are migrating our wiki pages to conflunce. we have few pages that our business users would need to see.

i understand that setting up public access will provide access to everyone across confluene. or i can provide space specific anynymous access.

i have q's

1) what are some of the precautions that we need to take(permissions) so that entire world is not seeing our site( we have sensitive material out there)

2) does providing access to public, lets them download any pages/images and documents? is there a way to restrict this ?

3) are there any other workarounds to my issue without consuming licenses?

thanks

Nic Brough -Adaptavist- · Answer

I already explained what happens when a non-logged-in user arrives.

SSO twists it a little bit, but not that much.  All that happens with SSO is that a user will be logged in automatically IF they have already logged into another SSO enabled application AND they have a Confluence account.

sn_wwlwcp · Answer

im not clear nic. so, when we add public access to entire site and i share a link to a page with you, will confluence ask you to login ? if so, what would be the userid & password.

i thought public access meant when i hit a URL link ( like atlassian's confluence), i can just get rerad-only access to the page and navigate around(depending on space level permissions)

is this not the case?

thanks!

sn_wwlwcp · Answer

okay. but our username and passwords are synched to our SSO'ids which we use. so, if anonymous users are sent a link and they are asked to login, then would using the SSO consume the license? also, our Confluence permisions (on who can see/do what) flow from JIRA.

im not sure on how this would work ?