# Confluence Cloud authentication

> To create a connection, you need the following credentials:

## Prerequisites

To create a connection, you need the following credentials:

* OAuth 2.0 Authorization code: Scope, and
  your Confluence Cloud email and password.
* Bring your own OAuth 2.0 app: client ID, client secret.

:::note
When registering your OAuth application in Confluence Cloud, make sure to set the [callback URL](connections#callback-url) to the value displayed on the connection creation page, for example `https://cloud.uipath.com/provisioning_/callback` for Automation Cloud.
:::

## Add the Confluence Cloud connection

To create a connection to your Confluence Cloud instance, you need to perform the following steps:

1. Select Orchestrator from the product launcher.
2. Select a folder, and then navigate to the **Connections** tab.
3. Select **Add connection**.
4. To open the connection creation page, select the connector from the list. You can use the search bar to find the connector.
5. Add the scopes you need and select  **Connect**.

   For any secret-type field, you can select the menu next to the field and choose **Use credential asset** to reference an Orchestrator credential asset linked to an external vault instead of entering the value directly. For more information, see [Use credential assets for connections](credential-store-connections.md).
6. Next, the app asks for your permission to **Update**,**View**, and **Search** your Confluence spaces.
7. Select **Accept**.

For more information about authenticating in Confluence Cloud, visit the [Authentication and authorization](https://developer.atlassian.com/cloud/confluence/rest/v1/intro/#auth) page.

## Privileges and permissions

* When creating a connection via Confluence Cloud, you must allow the application to view and manage information in accordance
  with the following privileges and permissions
  + `write:confluence-file`
    - Upload attachments.
  + `read:confluence-space.summary`
    - Read a summary of space information without expansions.
  + `write:confluence-content`
    - Create and update content and its associated properties.
  + `read:confluence-content.summar`y
    - Read a summary of the content, which is the content without expansions. APIs using this scope may also return data allowed
      by `read:confluence-space.summary`. However, this scope is not a substitute for `read:confluence-space.summary`.
  + `search:confluence` 
    - Search Confluence. APIs using this scope may also return data allowed by `read:confluence-space.summary` and `read:confluence-content.summary`. However, this scope is not a substitute for `read:confluence-space.summary` or `read:confluence-content.summary`.
  + `offline_access`

More information regarding the OAuth 2.0 scopes are available in the Confluence Cloud official documentation at [Confluence scopes for OAuth 2.0 (3LO) and Forge apps](https://developer.atlassian.com/cloud/confluence/scopes-for-oauth-2-3LO-and-forge-apps/#scopes)