| title | Auto-provisioning | |
|---|---|---|
| linkTitle | Auto-provisioning | |
| description | Learn how Just-in-Time provisioning works with your SSO connection. | |
| keywords | user provisioning, just-in-time provisioning, JIT, autoprovision, Docker Admin, admin, security | |
| weight | 10 | |
| aliases |
|
Auto-provisioning automatically adds users to your organization when they sign in with email addresses that match your verified domains. You must verify a domain before enabling auto-provisioning.
Important
For domains that are part of an SSO connection, Just-in-Time (JIT) provisioning takes precedence over auto-provisioning when adding users to an organization.
When auto-provisioning is enabled for a verified domain:
- Users who sign in to Docker with matching email addresses are automatically added to your organization.
- Auto-provisioning only adds existing Docker users to your organization, it doesn't create new accounts.
- Users experience no changes to their sign-in process.
- Company and organization owners receive email notifications when new users are added.
- You may need to manage seats to accommodate new users.
Auto-provisioning is configured per domain. To enable it:
- Sign in to Docker Home and select your company or organization.
- Select Admin Console, then Domain management.
- Select the Actions menu next to the domain you want to enable auto-provisioning for.
- Select Enable auto-provisioning.
- Optional. If enabling auto-provisioning at the company level, select an organization.
- Select Enable to confirm.
The Auto-provisioning column will update to Enabled for the domain.
To disable auto-provisioning for a user:
- Sign in to Docker Home and select your organization. If your organization is part of a company, select the company and configure the domain for the organization at the company level.
- Select Admin Console, then Domain management.
- Select the Actions menu next to your domain.
- Select Disable auto-provisioning.
- Select Disable to confirm.