Docker Docs

Appearance

Fresh

Manage connections ​

Back

Manuals

Manage SSO domains and connections ​

Copy as Markdown

Open MarkdownAsk Docs AIClaudeOpen in Claude

Table of contents

Subscription:Business

Requires:Docker Desktop 4.42 and later

For:Administrators

This page covers how to manage single sign-on (SSO) after initial setup, including managing domains, connections, users, and provisioning settings.

Manage domains ​

Add a domain ​

To add a domain to an existing SSO connection:

  1. Sign in to Docker Home and select your company or organization from the top-left account drop-down.
  2. Select Admin Console, then SSO and SCIM.
  3. In the SSO connections table, select the Actions menu for your connection, then select Edit connection.
  4. Select Next to navigate to the domains section.
  5. In the Domains section, select Add domain.
  6. Enter the domain you want to add to the connection.
  7. Select Next to confirm or change the connected organizations.
  8. Select Next to confirm or change the default organization and team provisioning selections.
  9. Review the connection details and select Update connection.

Remove a domain from an SSO connection ​

Important

If you use multiple identity providers with the same domain, you must remove the domain from each SSO connection individually.

  1. Sign in to Docker Home and select your company or organization from the top-left account drop-down.
  2. Select Admin Console, then SSO and SCIM.
  3. In the SSO connections table, select the Actions menu for your connection, then Edit connection.
  4. Select Next to navigate to the domains section.
  5. In the Domain section, select the X icon next to the domain you want to remove.
  6. Select Next to confirm or change the connected organizations.
  7. Select Next to confirm or change the default organization and team provisioning selections.
  8. Review the connection details and select Update connection.

Note

When you re-add a domain, Docker assigns a new TXT record value. You must complete domain verification again with the new TXT record.

Manage SSO connections ​

View connections ​

To view all configured SSO connections:

  1. Sign in to Docker Home and select your company or organization from the top-left account drop-down.
  2. Select Admin Console, then SSO and SCIM.
  3. View all configured connections in the SSO connections table.

Edit a connection ​

To modify an existing SSO connection:

  1. Sign in to Docker Home and select your company or organization from the top-left account drop-down.
  2. Select Admin Console, then SSO and SCIM.
  3. In the SSO connections table, select the Actions menu for your connection, then Edit connection.
  4. Follow the on-screen instructions to modify your connection settings.

Delete a connection ​

To remove an SSO connection:

  1. Sign in to Docker Home and select your company or organization from the top-left account drop-down.
  2. Select Admin Console, then SSO and SCIM.
  3. In the SSO connections table, select the Actions menu for your connection, then Delete connection.
  4. Follow the on-screen instructions to confirm the deletion.

Warning

Deleting an SSO connection removes access for all users who authenticate through that connection.

Manage users and provisioning ​

Docker automatically provisions users through Just-in-Time (JIT) provisioning when they sign in via SSO. You can also manually manage users and configure different provisioning methods.

How provisioning works ​

Docker supports the following provisioning methods:

  • JIT provisioning (default): Users are automatically added to your organization when they sign in via SSO
  • SCIM provisioning: Sync users and groups from your identity provider to Docker
  • Group mapping: Sync user groups from your identity provider with teams in your Docker organization
  • Manual provisioning: Turn off automatic provisioning and manually invite users

For more information on provisioning methods, see Provision users.

Add guest users ​

To invite users who don't authenticate through your identity provider:

  1. Sign in to Docker Home and select your organization.
  2. Select Members.
  3. Select Invite.
  4. Follow the on-screen instructions to invite the user.

The user receives an email invitation and can create a Docker account or sign in with their existing account.

Remove users ​

To remove a user from your organization:

  1. Sign in to Docker Home and select your organization.
  2. Select Members.
  3. Find the user you want to remove and select the Actions menu next to their name.
  4. Select Remove and confirm the removal.

The user loses access to your organization immediately upon removal.