Security
Table of contents
Security helps individual users and organization owners secure their accounts, manage access, and control membership. You configure these settings in Docker Home.
Individual accounts
You sign in with your individual account.
- Two-factor authentication (2FA) adds a time-based one-time password (TOTP) from an authenticator app to your password.
- A personal access token (PAT) authenticates the Docker CLI and tools without your password, and is required for CLI sign-in when 2FA is on or single sign-on (SSO) is enforced.
Organization accounts
Organization and company owners set up how members sign in, add them to the organization, configure automation, and control what members can do.
- Single sign-on (SSO) federates sign-in through your identity provider, which can cover one organization or every organization in a company.
- Provisioning adds users with System for Cross-domain Identity Management (SCIM), Just-in-Time (JIT) provisioning, auto-provisioning, or domain matching.
- An organization access token (OAT) stays with the organization when membership changes.
- OIDC connections use OpenID Connect to authenticate GitHub Actions with short-lived tokens, as an alternative to a long-lived OAT.
- Roles and permissions control what members can do after they join.
