Onboard your organization

Table of contents
Subscription: Team Business
For: Administrators

Learn how to onboard your organization using Docker Hub or the Docker Admin Console.

Onboarding your organization lets administrators gain visibility into user activity and enforce security settings. In addition, members of your organization receive increased pull limits and other organization wide benefits. For more details, see Docker subscriptions and features.

In this guide, you'll learn how to do the following:

  • Identify your users to help you efficiently allocate your subscription seats
  • Invite members and owners to your organization
  • Secure authentication and authorization for your organization using Single Sign-On (SSO) and System for Cross-domain Identity Management (SCIM)
  • Enforce sign-on for Docker Desktop to ensure security best practices

Prerequisites

Before you start onboarding your organization, ensure that you:

  • Have a Docker Team or Business subscription. See Docker Pricing for details.

    Note

    When purchasing a self-serve subscription, the on-screen instructions guide you through creating an organization. If you have purchased a subscription through Docker Sales and you have not yet created an organization, see Create an organization.

  • Familiarize yourself with Docker concepts and terminology in the administration overview and FAQs.

Onboard with guided setup

The Admin Console has a guided setup to help you easily onboard your organization. The guided setup steps consist of basic onboarding tasks. If you want to onboard outside of the guided setup, see Recommended onboarding steps.

To onboard using the guided setup, navigate to the Admin Console and select Guided setup in the left-hand navigation.

The guided setup walks you through the following onboarding steps:

  • Invite your team: Invite owners and members.
  • Manage user access: Add and verify a domain, manage users with SSO, and enforce Docker Desktop sign-in.
  • Docker Desktop security: Configure image access management, registry access management, and settings management.

Step one: Identify your Docker users

Identifying your users helps you allocate seats efficiently and ensures they receive your Docker subscription benefits.

  1. Identify the Docker users in your organization.
    • If your organization uses device management software, like MDM or Jamf, you can use the device management software to help identify Docker users. See your device management software's documentation for details. You can identify Docker users by checking if Docker Desktop is installed at the following location on each user's machine:
      • Mac: /Applications/Docker.app
      • Windows: C:\Program Files\Docker\Docker
      • Linux: /opt/docker-desktop
    • If your organization doesn't use device management software or your users haven't installed Docker Desktop yet, you can survey your users.
  2. Ask users to update their Docker account email to one in your organization’s domain, or create a new account with that email.
    • To update an account's email address, instruct your users to sign in to Docker Hub, and update the email address to their email address in your organization's domain.
    • To create a new account, instruct your users to go sign up using their email address in your organization's domain.
  3. Ask your Docker sales representative or contact sales to get a list of Docker accounts that use an email address in your organization's domain.

Step two: Invite owners

When you create an organization, you are the only owner. It is optional to add additional owners. Owners can help you onboard and manage your organization.

To add an owner, invite a user and assign them the owner role. For more details, see Invite members.

Step three: Invite members

When you add users to your organization, you gain visibility into their activity and you can enforce security settings. In addition, members of your organization receive increased pull limits and other organization wide benefits.

To add a member, invite a user and assign them the member role. For more details, see Invite members.

Step four: Manage user access with SSO and SCIM

Configuring SSO and SCIM is optional and only available to Docker Business subscribers. To upgrade a Docker Team subscription to a Docker Business subscription, see Upgrade your subscription.

Use your identity provider (IdP) to manage members and provision them to Docker automatically via SSO and SCIM. See the following for more details:

  • Configure SSO to authenticate and add members when they sign in to Docker through your identity provider.

  • Optional. Enforce SSO to ensure that when users sign in to Docker, they must use SSO.

    Note

    Enforcing single sign-on (SSO) and enforcing Docker Desktop sign in are different features. For more details, see Enforcing sign-in versus enforcing single sign-on (SSO).

  • Configure SCIM to automatically provision, add, and de-provision members to Docker through your identity provider.

Step five: Enforce sign-in for Docker Desktop

By default, members of your organization can use Docker Desktop without signing in. When users don’t sign in as a member of your organization, they don’t receive the benefits of your organization’s subscription and they can circumvent Docker’s security features.

There are multiple ways you can enforce sign-in, depending on your company's setup and preferences:

Step six: Manage Docker Desktop security

Docker offers the following security features to manage your organization's security posture:

What's next

Your Docker subscription provides many more additional features. To learn more, see Docker subscriptions and features.