Moveworks leverages the Atlassian Confluence Server REST API to access knowledge base articles.

Authentication

Unlike Confluence Cloud which allows authentication via an API key, your on-premise instance of Confluence Server can only be accessed via HTTPS basic authentication.

Moveworks will require the following access to integrate with Confluence Server:

Service Account that has read access to the necessary Confluence spaces where end-user knowledge articles reside. These articles will be ingested and served.

Please see the following recommendations below when setting up your Confluence service account.

1. Password Verification: Before entering the credentials in Moveworks, verify the local password of the user. The local password of the Confluence account will always be random at the time of account creation. To know the password with certainty, perform a manual password reset within Confluence.
2. MFA Exception:Since Confluence Server uses basic authentication, the service account created for Moveworks will need to bypass the MFA with expectation - there are a few ways to handle this:
   • Apply an MFA exception policy for the Moveworks account at your IAM provider settings level
   • If you already allow direct access to Confluence when users are on the office network gateway or when connected via VPN, apply a firewall exception for the Moveworks IP ranges.
3. Moveworks Agent:
   1. An on-premise Moveworks Agent installation is required to integrate with Confluence Server. With the Moveworks Agent no firewall changes are needed to integrate with Atlassian Server.
   2. If this option does not work for any reason, please contact your Moveworks CS team to discuss alternatives.

Permissions Support (required for permissions-aware results)

Moveworks honours Confluence access controls, ensuring that individuals only see results for content they are permitted to view.

To enable permissions-aware ingestion for Confluence Server/Data Center, customers must install the Moveworks app in Confluence.

Install the Moveworks app

1. Download the Moveworks app JAR from:
   https://github.com/moveworks/confluence-plugin/releases/download/v1.0.0/moveworks_search-1.0.0.jar
2. In Confluence, go to Administration → Manage apps.
3. Click Upload app.
4. Upload the downloaded JAR file.
5. Confirm the app is installed and enabled (it should appear under User-installed apps as moveworks_search)

This installation is required to ingest permissions correctly, since some permission-related APIs are not available by default.

Create the Connector in Moveworks Setup

Navigate to Core Platform > System Connectors and create a new connector. Select Confluence Server and enter the information below:

• Connection Name: confluence_on_prem (recommended)
• Custom Base Url: Enter the URL of your Atlassian instance
• Authentication Type: Select preferred method of authentication (Basic Auth is recommended)
• Username: Enter the username of the service account created earlier
• Password: Enter the password of the service account created earlier