docs/layouts/shortcodes/admin-sso-config.md

1.9 KiB

{{ $product_link := "Docker Hub" }} {{ $sso_navigation := Navigate to the SSO settings page for your organization. Select **Organizations**, your organization, **Settings**, and then **Security**. }}

{{ if eq (.Get "product") "admin" }} {{ $product_link = "the Admin Console" }} {{ $sso_navigation = "Select your organization or company in the left navigation drop-down menu, and then select SSO and SCIM. Note that when an organization is part of a company, you must select the company and configure SSO for that organization at the company level. Each organization can have its own SSO configuration and domain, but it must be configured at the company level." }} {{ end }}

[!IMPORTANT]

If your IdP setup requires an Entity ID and the ACS URL, you must select the SAML tab in the Authentication Method section. For example, if your Entra ID (formerly Azure AD) Open ID Connect (OIDC) setup uses SAML configuration within Azure AD, you must select SAML. If you are configuring Open ID Connect with Entra ID (formerly Azure AD) select Azure AD (OIDC) as the authentication method. Also, IdP initiated connections aren't supported at this time.

After your domain is verified, create an SSO connection.

  1. Sign in to {{ $product_link }}.

  2. {{ $sso_navigation }}

  3. In the SSO connections table select Create Connection, and create a name for the connection.

    [!NOTE]

    You have to verify at least one domain before creating the connections.

  4. Select an authentication method, SAML or Azure AD (OIDC).

  5. Copy the following fields to add to your IdP:

    • SAML: Entity ID, ACS URL
    • Azure AD (OIDC): Redirect URL

    SAML

    Azure AD