Skip to content

Commit c03ffc8

Browse files
committed
reorganized provisioning; split domain management into two topics since it contained two topics; moved domain management into provision since sso has its own instructions in setup
1 parent 5f762aa commit c03ffc8

14 files changed

Lines changed: 70 additions & 66 deletions

File tree

content/manuals/admin/organization/_index.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -31,13 +31,11 @@ grid:
3131
link: /admin/organization/general-settings/
3232
- title: SSO and SCIM
3333
description: 'Set up [Single Sign-On](/security/for-admins/single-sign-on/)
34-
and [SCIM](/security/for-admins/provisioning/scim/) for your organization.
35-
36-
'
34+
and [SCIM](/security/for-admins/provisioning/scim/) for your organization.'
3735
icon: key
3836
- title: Domain management
3937
description: Add, verify, and audit your domains.
40-
link: /security/for-admins/domain-management/
38+
link: /enterprise/security/provisioning/domain-management/
4139
icon: domain_verification
4240
- title: FAQs
4341
description: Explore common organization FAQs.

content/manuals/admin/organization/general-settings.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,5 +31,5 @@ After configuring your organization information, you can:
3131

3232
- [Configure single sign-on (SSO)](/manuals/enterprise/security/single-sign-on/connect.md)
3333
- [Set up SCIM provisioning](/manuals/enterprise/security/provisioning/scim.md)
34-
- [Manage domains](/manuals/enterprise/security/domain-management.md)
34+
- [Manage domains](/enterprise/security/provisioning/domain-management)
3535
- [Create a company](/manuals/admin/company/new-company.md)

content/manuals/admin/organization/onboard.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -169,7 +169,7 @@ security posture:
169169

170170
- [Manage Docker products](./manage-products.md) to configure access and view usage.
171171
- Configure [Hardened Docker Desktop](/desktop/hardened-desktop/) to improve your organization’s security posture for containerized development.
172-
- [Manage your domains](/manuals/enterprise/security/domain-management.md) to ensure that all Docker users in your domain are part of your organization.
172+
- [Manage your domains](/enterprise/security/provisioning/domain-management) to ensure that all Docker users in your domain are part of your organization.
173173

174174
Your Docker subscription provides many more additional features. To learn more,
175175
see [Docker subscriptions and features](https://www.docker.com/pricing?ref=Docs&refAction=DocsAdminOnboard).

content/manuals/enterprise/security/_index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ grid_admins:
3434
icon: passkey
3535
- title: Domain management
3636
description: Identify uncaptured users in your organization.
37-
link: /enterprise/security/domain-management/
37+
link: /enterprise/security/provisioning/domain-management/
3838
icon: person_search
3939
- title: Docker Scout
4040
description: Explore how Docker Scout can help you create a more secure software supply chain.

content/manuals/enterprise/security/hardened-desktop/settings-management/_index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ When multiple policies exist, Docker Desktop applies them in this order:
6262

6363
You can create settings management policies at any time, but your organization needs to verify a domain before the policies take effect.
6464

65-
1. Check that you have [added and verified](/manuals/enterprise/security/domain-management.md#add-and-verify-a-domain) your organization's domain.
65+
1. Check that you have [added and verified](/enterprise/security/provisioning/domain-management/#add-and-verify-a-domain) your organization's domain.
6666
2. [Enforce sign-in](/manuals/enterprise/security/enforce-sign-in/_index.md) to
6767
ensure all developers authenticate with your organization.
6868
3. Choose a configuration method:
Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
---
2+
title: Auto-provisioning
3+
linkTitle: Auto-provisioning
4+
description: Learn how Just-in-Time provisioning works with your SSO connection.
5+
keywords: user provisioning, just-in-time provisioning, JIT, autoprovision, Docker Admin, admin, security
6+
weight: 10
7+
aliases:
8+
- /security/for-admins/provisioning/just-in-time/
9+
---
10+
11+
Auto-provisioning automatically adds users to your organization when they sign in with email addresses that match your verified domains. You must verify a domain before enabling auto-provisioning.
12+
13+
> [!IMPORTANT]
14+
>
15+
> For domains that are part of an SSO connection, Just-in-Time (JIT) provisioning takes precedence over auto-provisioning when adding users to an organization.
16+
17+
### Overview
18+
19+
When auto-provisioning is enabled for a verified domain:
20+
21+
- Users who sign in to Docker with matching email addresses are automatically added to your organization.
22+
- Auto-provisioning only adds existing Docker users to your organization, it doesn't create new accounts.
23+
- Users experience no changes to their sign-in process.
24+
- Company and organization owners receive email notifications when new users are added.
25+
- You may need to [manage seats](/manuals/subscription/manage-seats.md) to accommodate new users.
26+
27+
### Enable auto-provisioning
28+
29+
Auto-provisioning is configured per domain. To enable it:
30+
31+
1. Sign in to [Docker Home](https://app.docker.com) and select
32+
your company or organization.
33+
1. Select **Admin Console**, then **Domain management**.
34+
1. Select the **Actions menu** next to the domain you want to enable
35+
auto-provisioning for.
36+
1. Select **Enable auto-provisioning**.
37+
1. Optional. If enabling auto-provisioning at the company level, select an
38+
organization.
39+
1. Select **Enable** to confirm.
40+
41+
The **Auto-provisioning** column will update to **Enabled** for the domain.
42+
43+
### Disable auto-provisioning
44+
45+
To disable auto-provisioning for a user:
46+
47+
1. Sign in to [Docker Home](https://app.docker.com) and select
48+
your organization. If your organization is part of a company, select the company
49+
and configure the domain for the organization at the company level.
50+
1. Select **Admin Console**, then **Domain management**.
51+
1. Select the **Actions menu** next to your domain.
52+
1. Select **Disable auto-provisioning**.
53+
1. Select **Disable** to confirm.

content/manuals/enterprise/security/domain-management.md renamed to content/manuals/enterprise/security/provisioning/domain-management.md

Lines changed: 2 additions & 50 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
2-
title: Manage domains
2+
title: Add and manage domains
33
description: Add, verify, and manage domains to control user access and enable auto-provisioning in Docker organizations
44
keywords: domain management, domain verification, auto-provisioning, user management, DNS, TXT record, Admin Console
5-
weight: 55
5+
weight: 40
66
aliases:
77
- /security/for-admins/domain-management/
88
- /docker-hub/domain-audit/
@@ -79,56 +79,8 @@ your domain name.
7979
{{< /tab >}}
8080
{{< /tabs >}}
8181

82-
## Configure auto-provisioning
83-
84-
Auto-provisioning automatically adds users to your organization when they sign in with email addresses that match your verified domains. You must verify a domain before enabling auto-provisioning.
85-
86-
> [!IMPORTANT]
87-
>
88-
> For domains that are part of an SSO connection, Just-in-Time (JIT) provisioning takes precedence over auto-provisioning when adding users to an organization.
89-
90-
### How auto-provisioning works
91-
92-
When auto-provisioning is enabled for a verified domain:
93-
94-
- Users who sign in to Docker with matching email addresses are automatically added to your organization.
95-
- Auto-provisioning only adds existing Docker users to your organization, it doesn't create new accounts.
96-
- Users experience no changes to their sign-in process.
97-
- Company and organization owners receive email notifications when new users are added.
98-
- You may need to [manage seats](/manuals/subscription/manage-seats.md) to accommodate new users.
99-
100-
### Enable auto-provisioning
101-
102-
Auto-provisioning is configured per domain. To enable it:
103-
104-
1. Sign in to [Docker Home](https://app.docker.com) and select
105-
your company or organization.
106-
1. Select **Admin Console**, then **Domain management**.
107-
1. Select the **Actions menu** next to the domain you want to enable
108-
auto-provisioning for.
109-
1. Select **Enable auto-provisioning**.
110-
1. Optional. If enabling auto-provisioning at the company level, select an
111-
organization.
112-
1. Select **Enable** to confirm.
113-
114-
The **Auto-provisioning** column will update to **Enabled** for the domain.
115-
116-
### Disable auto-provisioning
117-
118-
To disable auto-provisioning for a user:
119-
120-
1. Sign in to [Docker Home](https://app.docker.com) and select
121-
your organization. If your organization is part of a company, select the company
122-
and configure the domain for the organization at the company level.
123-
1. Select **Admin Console**, then **Domain management**.
124-
1. Select the **Actions menu** next to your domain.
125-
1. Select **Disable auto-provisioning**.
126-
1. Select **Disable** to confirm.
127-
12882
## Audit domains for uncaptured users
12983

130-
{{< summary-bar feature_name="Domain audit" >}}
131-
13284
Domain audit identifies uncaptured users. Uncaptured users are Docker users who have authenticated using an email address associated with your verified domains but aren't members of your Docker organization.
13385

13486
### Limitations

content/manuals/enterprise/security/provisioning/just-in-time.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ description: Learn how Just-in-Time provisioning works with your SSO connection.
33
keywords: user provisioning, just-in-time provisioning, JIT, autoprovision, Docker Admin, admin, security
44
title: Just-in-Time provisioning
55
linkTitle: Just-in-Time
6-
weight: 20
6+
weight: 30
77
aliases:
88
- /security/for-admins/provisioning/just-in-time/
99
---

content/manuals/enterprise/security/provisioning/scim/_index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: SCIM overview
33
linkTitle: SCIM
4-
weight: 10
4+
weight: 20
55
description: Learn how System for Cross-domain Identity Management works and how to set it up.
66
keywords: SCIM, SSO, user provisioning, de-provisioning, role mapping, assign users
77
aliases:

content/manuals/enterprise/security/provisioning/scim/provision-scim.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: SCIM provisioning
3-
linkTitle: SCIM
2+
title: Set up SCIM provisioning
3+
linkTitle: Set up
44
description: Learn how System for Cross-domain Identity Management works and how to set it up.
55
weight: 10
66
---

0 commit comments

Comments
 (0)