Manage unassociated machines

Table of contents

Subscription: Team Business

For: Administrators

Organization owners can identify, view, and manage Docker Desktop machines that are likely associated with their organization, based on usage, but aren't currently linked to user accounts. This self-service capability helps you understand Docker Desktop usage across your organization and streamline user onboarding without IT involvement.

How Docker identifies unassociated machines

Docker uses telemetry data to identify which machines likely belong to your organization:

Domain matching: Users signed in with email domains associated with your organization
Registry patterns: Analysis of container registry access patterns that indicate organizational usage

View unassociated machines

To see detailed information about unassociated machines:

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.

The machine list displays:

Machine ID (Docker-generated identifier)
The registry address used to predict whether a user is part of your organization
User email (only displays if the user is signed into Docker Desktop while using it)
Docker Desktop version
Operating system (OS)
Last activity date
Sign-in enforced status

You can:

Export the list as CSV
Take actions on individual or multiple machines

Important
Sign-in enforcement for unassociated machines is different from the organization-level sign-in enforcement available through registry.json and configuration profiles. This sign-in enforcement only requires users to sign in so admins can identify who is using the machine, meaning users can sign in with any email address. For more stringent security controls that limit sign-ins to users who are already part of your organization, see Enforce sign-in.

Sign-in enforcement helps you identify who is using unassociated machines in your organization. When you enable enforcement, users on these machines will be required to sign in to Docker Desktop. Once they sign in, their email addresses will appear in the Unassociated list, allowing you to then add them to your organization.

You can enable sign-in enforcement using two methods:

For all unassociated machines in your organization
For individual unassociated machines

Enable for all unassociated machines

To enable sign-in enforcement for all unassociated machines:

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.
Turn on the Enforce sign-in toggle.
In the pop-up modal, select Require sign-in to confirm.

The Sign-in required status updates all unassociated machines to Yes.

Sign-in enforcement only takes effect after Docker Desktop is restarted. Users can continue using Docker Desktop until their next restart.

Note
When you enable sign-in enforcement for all unassociated machines, any new machines detected in the future automatically have sign-in enforcement enabled.

Enable for individual unassociated machines

To enable sign-in enforcement for individual unassociated machines:

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.
Locate the machine you want to enable sign-in enforcement for.
Select the Actions menu and choose Turn on sign-in enforcement.
In the pop-up modal, select Require sign-in to confirm.

The Sign-in required status updates for the individual machine to Yes.

After you enable sign-in enforcement:

When users open Docker Desktop, they see a sign-in prompt. They must sign in to continue using Docker Desktop.
User email addresses appear in the Unassociated list.
You can add users to your organization.

Users can continue using Docker Desktop immediately after signing in, even before being added to your organization.

Add unassociated machines to your organization

When users in your organization use Docker without signing in, their machines appear in the Unassociated list. You can add these users to your organization in two ways:

Automatic addition:
- Auto-provisioning: If you have verified domains with auto-provisioning enabled, users who sign in with a matching email domain will automatically be added to your organization. For more information on verifying domains and auto-provisioning, see Domain management.
- SSO user provisioning: If you have SSO configured with Just-in-Time provisioning, users who sign in through your SSO connection will automatically be added to your organization.
Manual addition: If you don't have auto-provisioning or SSO set up, or if a user's email domain doesn't match your configured domains, their email will appear in the Unassociated list where you can choose to add them directly.

Note
If you add users and do not have enough seats in your organization, a pop-up appears prompting you to Get more seats.

Add individual users

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.
Locate the machine you want to add to your organization.
Select the Actions menu and choose Add to organization.
In the pop-up modal, select Add user.

Bulk add users

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.
Use the checkboxes to select the machines you want to add to your organizations.
Select the Add to organization button.
In the pop-up modal, select Add users to confirm.

Disable for all unassociated machines

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.
Turn off the Enforce sign-in toggle.
In the pop-up modal, select Turn off sign-in requirement to confirm.

The Sign-in required status updates for all unassociated machines to No.

Disable for specific unassociated machines

Sign in to Docker Home and select your organization.
Select Docker Desktop, then Unassociated.
Locate the machine you want to disable sign-in enforcement for.
Select the Actions menu and choose Turn off sign-in enforcement.
In the pop-up modal, select Turn off sign-in requirement to confirm.

The Sign-in required status updates for the individual machine to No.

What can I help you with?

Manage unassociated machines