Question about Confluence Server Knowledge Ingestion Setup
We're setting up Confluence Server knowledge ingestion with Moveworks. Our Confluence instance is on-prem and only reachable internally. We've configured the built-in connector and confirmed connectivity via the API Playground in Setup and we get a successful response.
We also have the on-prem agent deployed in our sandbox environment, which is where we've been testing this setup.
Two questions for the community:
1. Does the on-prem agent eliminate the need for an MFA exception on the service account?
The access requirements doc lists two suggestions for setup, an exception policy at the IAM provider level, or a firewall exception for Moveworks IP ranges but does not specify if one is sufficient or both are needed. However, it also states that the agent is required for Confluence Server integration and that "no firewall changes are needed" when the agent is in use. Are the API calls being routed through the agent; which is why the API Playground calls are working or is the MFA exception still needed?
2. Is the API Playground success a reliable indicator that the MFA path is clear?
We're getting a successful response in the API Playground in Moveworks Setup. Is that test representative of how the actual ingestion crawl authenticates through the agent, or could the crawl hit a different auth path that would still trigger MFA?
3. How does the ingestion cycle work for Confluence Server, and what would be the impact on the on-prem instance?
Our admins are concerned about the crawl putting load on our Confluence instance. We understand that ingestion cadence is not customer configurable, but we'd like to understand: Does Confluence Server do incremental/delta ingestion for both articles and user permissions, or does every cycle do a full crawl? How frequently do full ingestions run vs. deltas?
4. Is there any configuration required to be set up in the on-prem agent?
The documentation didn’t mention about setting up anything in the Moveworks agent but says we need it set up.
Any guidance from those who've completed this setup — especially with an internal-only Confluence instance and the on-prem agent — would be greatly appreciated.