Skip to content
Open
2 changes: 1 addition & 1 deletion content/guides/admin-user-management/onboard.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,4 +67,4 @@ It also:
- Ensures consistent access control policies.
- Help you scale permissions as teams grow or change.

For more information on how it works, see [Group mapping](/manuals/enterprise/security/provisioning/group-mapping.md).
For more information on how it works, see [Group mapping](/enterprise/security/provisioning/scim/group-mapping).
72 changes: 37 additions & 35 deletions content/manuals/admin/company/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,42 +4,44 @@ weight: 20
description: Learn how to manage multiple organizations using companies, including managing users, owners, and security.
keywords: company, multiple organizations, manage companies, admin console, Docker Business settings
grid:
- title: Create a company
description: Get started by learning how to create a company.
icon: apartment
link: /admin/company/new-company/
- title: Manage organizations
description: Learn how to add and manage organizations as well as seats within your
company.
icon: store
link: /admin/company/organizations/
- title: Manage company owners
description: Find out more about company owners and how to manage them.
icon: supervised_user_circle
link: /admin/company/owners/
- title: Manage users
description: Explore how to manage users in all organizations.
icon: group_add
link: /admin/company/users/
- title: Configure single sign-on
description: Discover how to configure SSO for your entire company.
icon: key
link: /security/for-admins/single-sign-on/
- title: Set up SCIM
description: Set up SCIM to automatically provision and deprovision users in your
company.
icon: checklist
link: /security/for-admins/provisioning/scim/
- title: Domain management
description: Add and verify your company's domains.
icon: domain_verification
link: /security/for-admins/domain-management/
- title: FAQs
description: Explore frequently asked questions about companies.
link: /faq/admin/company-faqs/
icon: help
- title: Create a company
description: Get started by learning how to create a company.
icon: apartment
link: /admin/company/new-company/
- title: Manage organizations
description:
Learn how to add and manage organizations as well as seats within your
company.
icon: store
link: /admin/company/organizations/
- title: Manage company owners
description: Find out more about company owners and how to manage them.
icon: supervised_user_circle
link: /admin/company/owners/
- title: Manage users
description: Explore how to manage users in all organizations.
icon: group_add
link: /admin/company/users/
- title: Configure single sign-on
description: Discover how to configure SSO for your entire company.
icon: key
link: /enterprise/security/single-sign-on/
- title: Set up SCIM
description:
Set up SCIM to automatically provision and deprovision users in your
company.
icon: checklist
link: /enterprise/security/provisioning/scim/
- title: Domain management
description: Add and verify your company's domains.
icon: domain_verification
link: /enterprise/security/domain-management/
- title: FAQs
description: Explore frequently asked questions about companies.
link: /faq/admin/company-faqs/
icon: help
aliases:
- /docker-hub/creating-companies/
- /docker-hub/creating-companies/
---

{{< summary-bar feature_name="Company" >}}
Expand Down
2 changes: 1 addition & 1 deletion content/manuals/admin/company/users.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ to invite members to.
> [!NOTE]
>
> When you invite members, you assign them a role.
> See [Roles and permissions](/security/for-admins/roles-and-permissions/)
> See [Roles and permissions](/enterprise/security/roles-and-permissions/core-roles/)
> for details about the access permissions for each role.

Pending invitations appear on the Members page. The invitees receive an
Expand Down
76 changes: 37 additions & 39 deletions content/manuals/admin/organization/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,44 +5,42 @@ weight: 10
description: Learn how to manage your Docker organization, including teams, members, permissions, and settings.
keywords: organizations, admin, overview, manage teams, roles
grid:
- title: Onboard your organization
description: Learn how to onboard and secure your organization.
icon: explore
link: /admin/organization/onboard
- title: Manage members
description: Explore how to manage members.
icon: group_add
link: /admin/organization/members/
- title: Activity logs
description: Learn how to audit the activities of your members.
icon: text_snippet
link: /admin/organization/activity-logs/
- title: Image Access Management
description: Control which types of images your developers can pull.
icon: photo_library
link: /admin/organization/image-access/
- title: Registry Access Management
description: Define which registries your developers can access.
icon: home_storage
link: /admin/organization/registry-access/
- title: Organization settings
description: Configure information for your organization and manage settings.
icon: settings
link: /admin/organization/general-settings/
- title: SSO and SCIM
description: 'Set up [Single Sign-On](/security/for-admins/single-sign-on/)
and [SCIM](/security/for-admins/provisioning/scim/) for your organization.

'
icon: key
- title: Domain management
description: Add, verify, and audit your domains.
link: /security/for-admins/domain-management/
icon: domain_verification
- title: FAQs
description: Explore common organization FAQs.
link: /faq/admin/organization-faqs/
icon: help
- title: Onboard your organization
description: Learn how to onboard and secure your organization.
icon: explore
link: /admin/organization/onboard
- title: Manage members
description: Explore how to manage members.
icon: group_add
link: /admin/organization/members/
- title: Activity logs
description: Learn how to audit the activities of your members.
icon: text_snippet
link: /admin/organization/activity-logs/
- title: Image Access Management
description: Control which types of images your developers can pull.
icon: photo_library
link: /admin/organization/image-access/
- title: Registry Access Management
description: Define which registries your developers can access.
icon: home_storage
link: /admin/organization/registry-access/
- title: Organization settings
description: Configure information for your organization and manage settings.
icon: settings
link: /admin/organization/general-settings/
- title: SSO and SCIM
description: "Set up [Single Sign-On](/security/for-admins/single-sign-on/)
and [SCIM](/security/for-admins/provisioning/scim/) for your organization."
icon: key
- title: Domain management
description: Add, verify, and audit your domains.
link: /enterprise/security/domain-management/
icon: domain_verification
- title: FAQs
description: Explore common organization FAQs.
link: /faq/admin/organization-faqs/
icon: help
---

A Docker organization is a collection of teams and repositories with centralized
Expand All @@ -67,4 +65,4 @@ and simplify permission management.

Learn how to create and manage your organization in the following sections.

{{< grid >}}
{{< grid >}}
2 changes: 1 addition & 1 deletion content/manuals/admin/organization/general-settings.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,5 +31,5 @@ After configuring your organization information, you can:

- [Configure single sign-on (SSO)](/manuals/enterprise/security/single-sign-on/connect.md)
- [Set up SCIM provisioning](/manuals/enterprise/security/provisioning/scim.md)
- [Manage domains](/manuals/enterprise/security/domain-management.md)
- [Manage domains](/enterprise/security/domain-management)
- [Create a company](/manuals/admin/company/new-company.md)
83 changes: 42 additions & 41 deletions content/manuals/admin/organization/onboard.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@ keywords: business, team, organizations, get started, onboarding, Admin Console,
toc_min: 1
toc_max: 3
aliases:
- /docker-hub/onboard/
- /docker-hub/onboard-team/
- /docker-hub/onboard-business/
- /docker-hub/onboard/
- /docker-hub/onboard-team/
- /docker-hub/onboard-business/
---

{{< summary-bar feature_name="Admin orgs" >}}
Expand All @@ -31,17 +31,17 @@ limits and other benefits when they are signed in.
Before you start onboarding your organization, ensure you:

- Have a Docker Team or Business subscription. For more details, see
[Docker subscriptions and features](https://www.docker.com/pricing?ref=Docs&refAction=DocsAdminOnboard).
[Docker subscriptions and features](https://www.docker.com/pricing?ref=Docs&refAction=DocsAdminOnboard).

> [!NOTE]
>
> When purchasing a self-serve subscription, the on-screen instructions
guide you through creating an organization. If you have purchased a
subscription through Docker Sales and you have not yet created an
organization, see [Create an organization](/manuals/admin/organization/orgs.md).
> guide you through creating an organization. If you have purchased a
> subscription through Docker Sales and you have not yet created an
> organization, see [Create an organization](/manuals/admin/organization/orgs.md).

- Familiarize yourself with Docker concepts and terminology in
the [administration overview](../_index.md).
the [administration overview](../_index.md).

## Onboard with guided setup

Expand All @@ -58,9 +58,9 @@ The guided setup walks you through the following onboarding steps:

- **Invite your team**: Invite owners and members.
- **Manage user access**: Add and verify a domain, manage users with SSO, and
enforce Docker Desktop sign-in.
enforce Docker Desktop sign-in.
- **Docker Desktop security**: Configure image access management, registry
access management, and settings management.
access management, and settings management.

## Recommended onboarding steps

Expand All @@ -71,28 +71,28 @@ receive your Docker subscription benefits.

1. Identify the Docker users in your organization.
- If your organization uses device management software, like MDM or Jamf,
you can use the device management software to help identify Docker users.
See your device management software's documentation for details. You can
identify Docker users by checking if Docker Desktop is installed at the
following location on each user's machine:
- Mac: `/Applications/Docker.app`
- Windows: `C:\Program Files\Docker\Docker`
- Linux: `/opt/docker-desktop`
you can use the device management software to help identify Docker users.
See your device management software's documentation for details. You can
identify Docker users by checking if Docker Desktop is installed at the
following location on each user's machine:
- Mac: `/Applications/Docker.app`
- Windows: `C:\Program Files\Docker\Docker`
- Linux: `/opt/docker-desktop`
- If your organization doesn't use device management software or your
users haven't installed Docker Desktop yet, you can survey your users to
identify who is using Docker Desktop.
users haven't installed Docker Desktop yet, you can survey your users to
identify who is using Docker Desktop.
1. Ask users to update their Docker account's email address to one associated
with your organization's domain, or create a new account with that email.
with your organization's domain, or create a new account with that email.
- To update an account's email address, instruct your users to sign in
to [Docker Hub](https://hub.docker.com), and update the email address to
their email address in your organization's domain.
to [Docker Hub](https://hub.docker.com), and update the email address to
their email address in your organization's domain.
- To create a new account, instruct your users to
[sign up](https://hub.docker.com/signup) using their email address associated
with your organization's domain. Ensure your users verify their email address.
[sign up](https://hub.docker.com/signup) using their email address associated
with your organization's domain. Ensure your users verify their email address.
1. Identify Docker accounts associated with your organization's domain:
- Ask your Docker sales representative or
[contact sales](https://www.docker.com/pricing/contact-sales/) to get a list
of Docker accounts that use an email address in your organization's domain.
[contact sales](https://www.docker.com/pricing/contact-sales/) to get a list
of Docker accounts that use an email address in your organization's domain.

### Step two: Invite owners

Expand Down Expand Up @@ -125,22 +125,22 @@ subscription, see [Change your subscription](/manuals/subscription/change.md).
Use your identity provider (IdP) to manage members and provision them to Docker
automatically via SSO and SCIM. See the following for more details:

- [Configure SSO](/manuals/enterprise/security/single-sign-on/connect.md)
to authenticate and add members when they sign in to Docker through your
identity provider.
- Optional.
[Enforce SSO](/manuals/enterprise/security/single-sign-on/connect.md) to
ensure that when users sign in to Docker, they must use SSO.
- [Configure SSO](/manuals/enterprise/security/single-sign-on/connect.md)
to authenticate and add members when they sign in to Docker through your
identity provider.
- Optional.
[Enforce SSO](/manuals/enterprise/security/single-sign-on/connect.md) to
ensure that when users sign in to Docker, they must use SSO.

> [!NOTE]
>
> Enforcing single sign-on (SSO) and enforcing Docker Desktop sign in
are different features. For more details, see
> [Enforcing sign-in versus enforcing single sign-on (SSO)](/manuals/enterprise/security/enforce-sign-in/_index.md#enforcing-sign-in-versus-enforcing-single-sign-on-sso).
> [!NOTE]
>
> Enforcing single sign-on (SSO) and enforcing Docker Desktop sign in
> are different features. For more details, see
> [Enforcing sign-in versus enforcing single sign-on (SSO)](/manuals/enterprise/security/enforce-sign-in/_index.md#enforcing-sign-in-versus-enforcing-single-sign-on-sso).

- [Configure SCIM](/manuals/enterprise/security/provisioning/scim.md) to
automatically provision, add, and de-provision members to Docker through
your identity provider.
- [Configure SCIM](/manuals/enterprise/security/provisioning/scim.md) to
automatically provision, add, and de-provision members to Docker through
your identity provider.

### Step five: Enforce sign-in for Docker Desktop

Expand All @@ -152,6 +152,7 @@ and they can circumvent [Docker’s security features](/manuals/enterprise/secur

There are multiple ways you can enforce sign-in, depending on your organization's
Docker configuration:

- [Registry key method (Windows only)](/manuals/enterprise/security/enforce-sign-in/methods.md#registry-key-method-windows-only)
- [`.plist` method (Mac only)](/manuals/enterprise/security/enforce-sign-in/methods.md#plist-method-mac-only)
- [`registry.json` method (All)](/manuals/enterprise/security/enforce-sign-in/methods.md#registryjson-method-all)
Expand All @@ -169,7 +170,7 @@ security posture:

- [Manage Docker products](./manage-products.md) to configure access and view usage.
- Configure [Hardened Docker Desktop](/desktop/hardened-desktop/) to improve your organization’s security posture for containerized development.
- [Manage your domains](/manuals/enterprise/security/domain-management.md) to ensure that all Docker users in your domain are part of your organization.
- [Manage your domains](/enterprise/security/domain-management) to ensure that all Docker users in your domain are part of your organization.

Your Docker subscription provides many more additional features. To learn more,
see [Docker subscriptions and features](https://www.docker.com/pricing?ref=Docs&refAction=DocsAdminOnboard).
Loading
Loading