Confluence space custom login
Asked by Harsha Mallapragada:

We want to create a user guide for our product and I know it can be easily done in Confluence. However, I have few questions:

* We have a web application with custom login. We want the space to available for people who have successfully logged into our site. Is it possible to restrict people to a space with custom login functionality?   

* When we create a space with anonymous access, any person with the URL can access it right?


Answers:
author: kennyngkk
body: Hi Harsha,

Before we begin, I would like to welcome you to our Community. Hope you are able to find what are you looking for with us.

> We have a web application with custom login. We want the space to available for people who have successfully logged into our site. Is it possible to restrict people to a space with custom login functionality?

For this question is a bit tricky to answer, as this is depending on the web application that you are configuring. This means that is depending on how you are displaying a particular space like showing the space as iframe(this is vulnerable to crackerjack hacking) or just by providing a link.
> When we create a space with anonymous access, any person with the URL can access it right?

That is correct but there are other configurations that you will need to configure before Anonymous users are able to view a space. Have a look at the knowledge base below for more information.

[Anonymous Users](https://confluence.atlassian.com/doc/setting-up-public-access-156.html "Anonymous Users")

comments: author: Harsha Mallapragada
body: That's a bummer. we can't do iframes for security reasons..   
i was hoping we could pass something like a validation token so that the site can be accessed. Looks like confluence is mostly for internal documentation rather than external documentation?


author: kennyngkk
body: > Looks like confluence is mostly for internal documentation rather than external documentation?

That is somewhat true? It meant that only internal people can write on it but it also allows(if enabled) for external to read the content. The reason is that you will still need an account to log in and edit documents.


author: Roger Brouwer
body: > This means that is depending on how you are displaying a particular space like showing the space as iframe(this is vulnerable to crackerjack hacking) or just by providing a link.

We have a similar situation. So, if we just want to provide a link to the Confluence space (not display content in an iframe), can we include user login credentials in the link?


author: kennyngkk
body: Hi Roger,

You can do this by following the knowledge base below.

* <https://confluence.atlassian.com/display/CONF33/Passing+username+and+password+via+URL>

Sorry for the delay in respond as I can only look into community when I have free time :(


author: Roger Brouwer
body: Hi Kenny, that's exactly what I was after. Thanks.

Just one more part to it... Can I combine authentication with another action in one URL?

For example I'd like to login and search in one step. I'm using the following URL pattern for the search.

```
<my_confluence_url>/dosearchsite.action?cql=siteSearch+~+"<search_terms_here>"+and+space=<space_key>
```

Thanks,

Roger