# Security


Security helps individual users and organization owners secure their
accounts, manage access, and control membership. You configure these
settings in [Docker Home](https://app.docker.com/).

## Individual accounts

You sign in with your individual account.

- [Two-factor authentication](/security/authentication/2fa/)
(2FA) adds a time-based one-time password (TOTP) from an authenticator
app to your password.
- A [personal access token](/security/access-tokens/personal-access-tokens/)
(PAT) authenticates the Docker CLI and tools without your password, and
is required for CLI sign-in when 2FA is on or single sign-on (SSO) is
enforced.

## Organization accounts

Organization and company owners set up how members sign in, add them to
the organization, configure automation, and control what members can do.

- [Single sign-on](/security/authentication/single-sign-on/)
(SSO) federates sign-in through your identity provider, which can cover
one organization or every organization in a company.
- [Provisioning](/security/provisioning/) adds users with
System for Cross-domain Identity Management (SCIM), Just-in-Time (JIT)
provisioning, auto-provisioning, or domain matching.
- An [organization access token](/security/access-tokens/organization-access-tokens/)
(OAT) stays with the organization when membership changes.
- [OIDC connections](/security/authentication/oidc-connections/)
use OpenID Connect to authenticate GitHub Actions with short-lived
tokens, as an alternative to a long-lived OAT.
- [Roles and permissions](/security/roles-and-permissions/)
control what members can do after they join.

## Next steps