Visio diagrams can be rendered from remote locations and external applications such as GitLab, GitHub, and so on. Since Since 5.3.0 release, the the Visio for Confluence app can access and render Visio diagrams located in Microsoft OneDrive. This article contains instructions to integrate OneDrive with Confluence with the aim of preserving data security and privacy.
|
|---|
Before you begin
Know how to create and use profiles. Refer to the following resources:
Understand why an application must be created using Microsoft Azure. An application created in Microsoft Azure acts like an interface that allows Confluence to access the Microsoft OneDrive content, and at the same time, provides an additional layer of security. A Confluence administrator must grant access to this application using his/her Microsoft credentials to establish the integration. This enables Confluence to be linked to Microsoft OneDrive and render Visio content in OneDrive on Confluence pages.
Steps
The following sections explain how to create a link between Confluence and Microsoft OneDriveand Microsoft OneDrive, and how to use a OneDrive profile to render your Visio content on your Confluence pages:
| Anchor | ||||
|---|---|---|---|---|
|
...
the Microsoft Azure portal
Register an application through App registrations in the Microsoft Azure portal. Refer to this link for Microsoft related instructions.
Open the Microsoft Azure portal and log in to the relevant business or personal Microsoft account.
...
Click New registration or Register an application to create a new application.
Enter a meaningful name for the application to be used when creating a profile in Visio for Confluence.
Select the required access level for this application in Supported account types.
Info It is recommended to use either of the following Supported account types options depending on the type of Microsoft account used:
- Accounts in this organizational directory only (<Full organization name> - Single tenant) with your work Microsoft account to provide the most secure access to OneDrive contents. This option ensures that only those people from your organization with access to the OneDrive contents can render Visio files in the your Confluence instance.
- Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox) with your personal Microsoft account. Note that, with this type of account type, anyone with access to the account can render OneDrive Visio files in Confluence.
Select the Help me choose link provided below the given Supported account types options for more information.
Select Web and enter
https://<confluence_base_url>/admin/plugins/org.swift.confluence.visio/visioonedrive.actionin the text box provided in Redirect URI (optional). Replace<confluence_base_url>with
...
the base URL of your Confluence instance.
...
Click Register. The app gets registered and the Application (client) ID, used for all account types, and Directory (tenant) ID, used with work accounts, is displayed.
...
Select Certificates & secrets to create a client secret. The application uses the client ID and the secret for authentication to generate an access token for a profile in Confluence.
Click New client secret and a pop-up window appears. Enter a description for the client secret, select the required validity of the client secret, and click Add.
...
Copy the following values in a secure place:
Client secret:
...
This value is not shown again if another operation is performed or if you leave the page.
Client ID: This Application (client) ID value is shown on the Overview page of the newly created application.
Tenant ID:
...
If integrating with a work account,
...
this value is also shown on the Overview page of the newly created application.
Note These three values must be saved securely to be used later in profile creation in Confluence.
| Info |
|---|
Authenticating an application with Microsoft user credentials from Confluence provides the optimal method to protect your data and privacy. Profiles allow multiple users to access a OneDrive account across pages and instances of the Visio Viewer macro. |
| Anchor | ||||
|---|---|---|---|---|
|
...
OneDrive and Confluence
In your Confluence instance, navigate to
> Manage apps > Bobswift Configuration > Visio > Profiles, and click Add profile.
Specify Profile type as OneDrive, paste the copied client ID in OneDrive client ID, and paste the copied client secret value in OneDrive client secret. To access a work account, also paste the tenant ID in OneDrive tenant ID.
Authorize to create an interface from the Visio for Confluence app with the OneDrive account.
Note title Do not skip this step! Confluence tries to establish a connection with OneDrive at this stage. If the given IDs are incorrect or invalid, relevant errors are displayed and the integration with OneDrive fails. If so, recheck that the information given here is correct and retry.
A Microsoft
...
login window appears to grant permissions to the app created in the previous section. If you did not log in Microsoft yet, a login window opens which prompts you to log in and you must provide the credentials of the user who created the app. Click Yes to grant access to the app to read the OneDrive files.
An access token is generated and is automatically filled in the Access token field if the app is granted access.
Save the profile.
The integration between OneDrive and the registered app is now complete and the profile can be used to render Visio diagrams onto Confluence pages. The following screenshot displays the order to be followed when creating the profile linked to OneDrive:
...
| Note |
|---|
About access tokens:
|
| Anchor | ||||
|---|---|---|---|---|
|
Go to the required Confluence page, and add a Visio Viewer macro or edit an existing macro to open the macro editor.
Select the newly created profile in Profile.
Enter the relative path of the Visio file to be rendered in URL to Visio file.
See a Preview, or Save and Publish your page.
...