Security

Security helps individual users and organization owners secure their accounts, manage access, and control membership. You configure these settings in Docker Home.

Individual accounts#

You sign in with your individual account.

• Two-factor authentication (2FA) adds a time-based one-time password (TOTP) from an authenticator app to your password.
• A personal access token (PAT) authenticates the Docker CLI and tools without your password, and is required for CLI sign-in when 2FA is on or single sign-on (SSO) is enforced.

Organization accounts#

Organization and company owners set up how members sign in, add them to the organization, configure automation, and control what members can do.

• Single sign-on (SSO) federates sign-in through your identity provider, which can cover one organization or every organization in a company.
• Provisioning adds users with System for Cross-domain Identity Management (SCIM), Just-in-Time (JIT) provisioning, auto-provisioning, or domain matching.
• An organization access token (OAT) stays with the organization when membership changes.
• OIDC connections use OpenID Connect to authenticate GitHub Actions with short-lived tokens, as an alternative to a long-lived OAT.
• Roles and permissions control what members can do after they join.

Next steps#

{{< grid >}}