Securing a published site

Not every Confluence site should be public. Capable Sites can put a password or a sign-in in front of every page, so only the people you choose can read it. Access changes apply straight away, with no deploy, and cover staging previews too.

Remember that Confluence page restrictions do not carry over to a published site. Access covers the whole site. To keep one page private, keep it off the site.


#Common tasks

You want to

Go to

Put one shared password on the site

Password-protect a Confluence site

Let people sign in with Google Workspace

Let visitors sign in to a Confluence site with Google

Let people sign in with Microsoft 365 or Entra ID

Let visitors sign in with Microsoft Entra ID (Azure AD)

Make the site private to your own people

Restrict a published Confluence site to your company

End every visitor session now

Sign everyone out of a protected site

Compare the five access modes

Access modes

Understand who each sign-in lets in, and why visitors are refused

Restrict access to sites

Fix a failed Access save

Saving Access settings fails with a generic error


#Guides in this section



Public by default. Private when you need it.