# Secure Docker accounts and organizations


Security helps individual users and organization owners secure their
accounts, manage access, and control membership. You configure these
settings in [Docker Home](https://app.docker.com/).

## Individual accounts

You sign in with your individual account.

- [Two-factor authentication](/security/authentication/2fa/)
  (2FA) adds a time-based one-time password (TOTP) from an authenticator
  app to your password.
- A [personal access token](/security/access-tokens/personal-access-tokens/)
  (PAT) authenticates the Docker CLI and tools without your password, and
  is required for CLI sign-in when 2FA is on or single sign-on (SSO) is
  enforced.

## Organization accounts

Organization and company owners set up how members sign in, add them to
the organization, configure automation, and control what members can do.

- [Single sign-on](/security/authentication/single-sign-on/)
  (SSO) federates sign-in through your identity provider, which can cover
  one organization or every organization in a company.
- [Provisioning](/security/provisioning/) adds users with
  System for Cross-domain Identity Management (SCIM), Just-in-Time (JIT)
  provisioning, auto-provisioning, or domain matching.
- An [organization access token](/security/access-tokens/organization-access-tokens/)
  (OAT) stays with the organization when membership changes.
- [OIDC connections](/security/authentication/oidc-connections/)
  use OpenID Connect to authenticate GitHub Actions with short-lived
  tokens, as an alternative to a long-lived OAT.
- [Roles and permissions](/security/roles-and-permissions/)
  control what members can do after they join.

## Next steps