docs/docker-hub/enforcing-sso.md

description	keywords	title
enforcing sso	sso, enforce	Enforce SSO Login

Without SSO enforcement, users can continue to sign in using Docker username and password. If users login with your Domain email, they will authenticate through your identity provider instead.

You must test your SSO connection first if you’d like to enforce SSO log-in. All users must authenticate with an email address instead of their Docker ID if SSO is enforced

1. In the Single Sign-On Connections table, select the Action icon and Enforce Single Sign-on.

   Note

   When you enforce SSO, all members of your organization with a matching domain must authenticate through your IdP.

2. Continue with the on-screen instructions and verify that you’ve completed the tasks.

3. Select Turn on enforcement to complete.