Skip to content

Commit 5f58093

Browse files
security: move domain audit (#23064)
## Description - Moved domain audit under "domain management" since the UI has changed, it will no longer be deprecated, and it makes sense in the context of other domain management features ## Related issues or tickets https://docker.atlassian.net/browse/ENGDOCS-2830 ## Reviews - [ ] Editorial review --------- Co-authored-by: Craig Osterhout <103533812+craig-osterhout@users.noreply.github.com>
1 parent 1ab3b48 commit 5f58093

File tree

2 files changed

+45
-0
lines changed

2 files changed

+45
-0
lines changed

content/manuals/security/for-admins/domain-management.md

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,48 @@ and configure the domain for the organization at the company level.
103103
**Delete domain**.
104104
1. To confirm, select **Delete domain** in the pop-up modal.
105105

106+
## Audit domains
107+
108+
{{< summary-bar feature_name="Domain audit" >}}
109+
110+
The domain audit feature identifies uncapture users in an organization.
111+
Uncaptured users are Docker users who have authenticated to Docker
112+
using an email address associated with one of your verified domains,
113+
but they're not a member of your Docker organization.
114+
115+
### Known limitations
116+
117+
Domain audit can't identify the following Docker users:
118+
119+
- Users who access Docker Desktop without authenticating
120+
- Users who authenticate using an account that doesn't have an
121+
email address associated with one of your verified domains.
122+
123+
Although domain audit can't identify all Docker users,
124+
you can enforce sign-in to prevent unidentifiable users from accessing
125+
Docker Desktop in your environment. For more information,
126+
see [Enforce sign-in](/manuals/security/for-admins/enforce-sign-in.md).
127+
128+
### Audit your domain for uncaptured users
129+
130+
1. Sign in to [Docker Home](https://app.docker.com) and choose your
131+
company.
132+
1. Select **Admin Console**, then **Domain management**.
133+
1. In **Domain audit**, select **Export Users** to export a CSV file
134+
of uncaptured users.
135+
136+
The CSV file contains the following columns:
137+
138+
- Name: Name of the Docker user
139+
- Username: Docker ID of the Docker user
140+
- Email: Email address of the Docker user
141+
142+
### Invite uncaptured users
143+
144+
You can invite all uncaptured users to your organization using the exported
145+
CSV file. For more information on bulk inviting users, see
146+
[Manage organization members](/manuals/admin/organization/members.md).
147+
106148
## Auto-provisioning
107149

108150
You must add and verify a domain before enabling auto-provisioning. This

data/summary.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -178,6 +178,9 @@ Docker Scout Mount Permissions:
178178
Domain management:
179179
subscription: [Business]
180180
for: Administrators
181+
Domain audit:
182+
subscription: [Business]
183+
for: Administrators
181184
Enforce sign-in:
182185
subscription: [Team, Business]
183186
for: Administrators

0 commit comments

Comments
 (0)