Managing User Access, Enforcing Sign-In, and Enhancing Security in Docker

To add an owner, invite a user and assign them the owner role. For more details, see [Invite members](/admin/organization/members/). ### Step three: Invite members When you add users to your organization, you gain visibility into their activity and you can enforce security settings. In addition, members of your organization receive increased pull limits and other organization wide benefits. To add a member, invite a user and assign them the member role. For more details, see [Invite members](/admin/organization/members/). ### Step four: Manage user access with SSO and SCIM Configuring SSO and SCIM is optional and only available to Docker Business subscribers. To upgrade a Docker Team subscription to a Docker Business subscription, see [Upgrade your subscription](/subscription/upgrade/). Use your identity provider (IdP) to manage members and provision them to Docker automatically via SSO and SCIM. See the following for more details: - [Configure SSO](/manuals/security/for-admins/single-sign-on/configure.md) to authenticate and add members when they sign in to Docker through your identity provider. - Optional. [Enforce SSO](/manuals/security/for-admins/single-sign-on/connect.md) to ensure that when users sign in to Docker, they must use SSO. > [!NOTE] > > Enforcing single sign-on (SSO) and enforcing Docker Desktop sign in are different features. For more details, see > [Enforcing sign-in versus enforcing single sign-on (SSO)](/security/for-admins/enforce-sign-in/#enforcing-sign-in-versus-enforcing-single-sign-on-sso). - [Configure SCIM](/security/for-admins/provisioning/scim/) to automatically provision, add, and de-provision members to Docker through your identity provider. ### Step five: Enforce sign-in for Docker Desktop By default, members of your organization can use Docker Desktop without signing in. When users don’t sign in as a member of your organization, they don’t receive the [benefits of your organization’s subscription](../../subscription/details.md) and they can circumvent [Docker’s security features](/security/for-admins/hardened-desktop/). There are multiple ways you can enforce sign-in, depending on your company's setup and preferences: - [Registry key method (Windows only)](/security/for-admins/enforce-sign-in/methods/#registry-key-method-windows-only) - [`.plist` method (Mac only)](/security/for-admins/enforce-sign-in/methods/#plist-method-mac-only) - [`registry.json` method (All)](/security/for-admins/enforce-sign-in/methods/#registryjson-method-all) ### Step six: Manage Docker Desktop security Docker offers the following security features to manage your organization's security posture: - [Image Access Management](/manuals/security/for-admins/hardened-desktop/image-access-management.md): Control which types of images your developers can pull from Docker Hub. - [Registry Access Management](/manuals/security/for-admins/hardened-desktop/registry-access-management.md): Define which registries your developers can access. - [Settings management](/manuals/security/for-admins/hardened-desktop/settings-management.md): Set and control Docker Desktop settings for your users. ## What's next - [Manage Docker products](./manage-products.md) to configure access and view usage. - Configure [Hardened Docker Desktop](/desktop/hardened-desktop/) to improve your organization’s security posture for containerized development. - [Audit your domains](/docker-hub/domain-audit/) to ensure that all Docker users in your domain are part of your organization. Your Docker subscription provides many more additional features. To learn more, see [Docker subscriptions and features](/subscription/details/).

This section explains how to invite members to a Docker organization, highlighting increased pull limits and security benefits. It details optional configurations for SSO and SCIM (available for Docker Business), enabling identity provider-managed provisioning and authentication. It also covers enforcing Docker Desktop sign-in to ensure users receive subscription benefits and adhere to security features. Finally, it outlines Docker Desktop security management features such as image and registry access control, and settings management. The section concludes with links to further resources on managing Docker products, hardening Docker Desktop, and auditing domains.