Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion content/guides/testcontainers-cloud/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ Testcontainers Cloud is a cloud-based solution designed to streamline and enhanc

Works well with Docker Desktop, GitHub Actions, Jenkins, Kubernetes, and other CI solutions

Docker Pro, Team, and Business subscriptions come with Testcontainers Cloud runtime minutes, and additional minutes are available via consumption pricing.
Docker Pro, Team, and Business subscriptions come with Testcontainers Cloud runtime minutes, and additional minutes are available via consumption pricing. Testcontainers Cloud runtime minutes do not rollover month to month.

## Who’s this for?

Expand Down
51 changes: 26 additions & 25 deletions content/manuals/security/troubleshoot/troubleshoot-sso.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@ keywords: sso, troubleshoot, single sign-on
title: Troubleshoot single sign-on
linkTitle: Troubleshoot SSO
tags: [Troubleshooting]
toc_max: 2
aliases:
- "/security/for-admins/single-sign-on/troubleshoot/"
---
Expand All @@ -16,15 +17,15 @@ following sections describe some common SSO errors and possible solutions.

If you experience issues with SSO, check both the Docker Admin Console and your identity provider (IdP) for errors first.

#### Check Docker error logs
### Check Docker error logs

1. Sign in to the [Admin Console](https://app.docker.com/admin/) and select your organization.
2. Select **SSO and SCIM**.
3. In the SSO connections table, select the **Action** menu and then **View error logs**.
4. For more details on specific errors, select **View error details** next to an error message.
5. Note any errors you see on this page for further troubleshooting.

#### Check for errors in your IdP
### Check for errors in your IdP

1. Review your IdP’s logs or audit trails for any failed authentication or provisioning attempts.
2. Confirm that your IdP’s SSO settings match the values provided in Docker.
Expand All @@ -36,31 +37,31 @@ For further troubleshooting, check your IdP’s documentation. You can also cont

## Groups are not formatted correctly

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
Some of the groups assigned to the user are not formatted as '<organization name>:<team name>'. Directory groups will be ignored and user will be provisioned into the default organization and team.
```

#### Possible causes
### Possible causes

- Incorrect group name formatting in your identity provider (IdP): Docker requires groups to follow the format `<organization>:<team>`. If the groups assigned to a user do not follow this format, they will be ignored.
- Non-matching groups between IdP and Docker organization: If a group in your IdP does not have a corresponding team in Docker, it will not be recognized, and the user will be placed in the default organization and team.

#### Affected environments
### Affected environments

- Docker single sign-on setup using IdPs such as Okta or Azure AD
- Organizations using group-based role assignments in Docker

#### Steps to replicate
### Steps to replicate

To replicate this issue:
1. Attempt to sign in to Docker using SSO.
2. The user is assigned groups in the IdP but does not get placed in the expected Docker Team.
3. Review Docker logs or IdP logs to find the error message.

#### Solutions
### Solutions

Update group names in your IdP:
1. Go to your IdP's group management section.
Expand All @@ -71,20 +72,20 @@ Update group names in your IdP:

## User is not assigned to the organization

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
User '$username' is not assigned to this SSO organization. Contact your administrator. TraceID: XXXXXXXXXXXXX
```

#### Possible causes
### Possible causes

- User is not assigned to the organization: If Just-in-Time (JIT) provisioning is disabled, the user may not be assigned to your organization.
- User is not invited to the organization: If JIT is disabled and you do not want to enable it, the user must be manually invited.
- SCIM provisioning is misconfigured: If you use SCIM for user provisioning, it may not be correctly syncing users from your IdP.

#### Solutions
### Solutions

**Enable JIT provisioning**

Expand Down Expand Up @@ -116,18 +117,18 @@ If you have SCIM enabled, troubleshoot your SCIM connection using the following

## IdP-initiated sign in is not enabled for connection

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
IdP-Initiated sign in is not enabled for connection '$ssoConnection'.
```

#### Possible causes
### Possible causes

Docker does not support an IdP-initiated SAML flow. This error occurs when a user attempts to authenticate from your IdP, such as using the Docker SSO app tile on the sign in page.

#### Solutions
### Solutions

**Authenticate from Docker apps**

Expand All @@ -139,18 +140,18 @@ You can hide the Docker SSO app from users in your IdP. This prevents users from

## Not enough seats in organization

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
Not enough seats in organization '$orgName'. Add more seats or contact your administrator.
```

#### Possible causes
### Possible causes

This error occurs when the organization has no available seats for the user when provisioning via Just-in-Time (JIT) provisioning or SCIM.

#### Solutions
### Solutions

**Add more seats to the organization**

Expand All @@ -162,20 +163,20 @@ Review your organization members and pending invitations. Remove inactive users

## Domain is not verified for SSO connection

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
Domain '$emailDomain' is not verified for your SSO connection. Contact your company administrator. TraceID: XXXXXXXXXXXXXX
```

#### Possible causes
### Possible causes

This error occurs if the IdP authenticated a user through SSO and the User Principal Name (UPN)
returned to Docker doesn’t match any of the verified domains associated to the
SSO connection configured in Docker.

#### Solutions
### Solutions

**Verify UPN attribute mapping**

Expand All @@ -187,20 +188,20 @@ Add and verify all domains and subdomains used as UPN by your IdP and associate

## Unable to find session

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
We couldn't find your session. You may have pressed the back button, refreshed the page, opened too many sign-in dialogs, or there is some issue with cookies. Try signing in again. If the issue persists, contact your administrator.
```

#### Possible causes
### Possible causes

The following causes may create this issue:
- The user pressed the back or refresh button during authentication.
- The authentication flow lost track of the initial request, preventing completion.

#### Solutions
### Solutions

**Do not disrupt the authentication flow**

Expand All @@ -212,20 +213,20 @@ Close the browser tab and restart the authentication flow from the Docker applic

## Name ID is not an email address

#### Error message
### Error message

When this issue occurs, the following error message is common:
```text
The name ID sent by the identity provider is not an email address. Contact your company administrator.
```

#### Possible causes
### Possible causes

The following causes may create this issue:
- The IdP sends a Name ID (UPN) that does not comply with the email format required by Docker.
- Docker SSO requires the Name ID to be the primary email address of the user.

#### Solutions
### Solutions

In your IdP, ensure the Name ID attribute format is correct:
1. Verify that the Name ID attribute format in your IdP is set to `EmailAddress`.
Expand Down
28 changes: 15 additions & 13 deletions content/manuals/subscription/details.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,9 +69,10 @@ Testcontainers Cloud.

Docker Pro includes:

- 200 Docker Build Cloud build minutes per month.
- 200 Docker Build Cloud build minutes per month. Docker Build Cloud minutes do not
rollover month to month.
- 2 included repositories with continuous vulnerability analysis in Docker Scout.
- 100 Testcontainers Cloud runtime minutes per month for use either in Docker Desktop or for CI.
- 100 Testcontainers Cloud runtime minutes per month for use either in Docker Desktop or for CI. Testcontainers Cloud runtime minutes do not rollover month to month.
- No Docker Hub image pull rate limits.

For a list of features available in each tier, see [Docker
Expand All @@ -90,9 +91,10 @@ Docker Hub, Docker Scout, Docker Build Cloud, and Testcontainers Cloud.

Docker Team includes:

- 500 Docker Build Cloud build minutes per month.
- 500 Docker Build Cloud build minutes per month. Docker Build Cloud minutes do not
rollover month to month.
- Unlimited Docker Scout repositories with continuous vulnerability analysis.
- 500 Testcontainers Cloud runtime minutes per month for use either in Docker Desktop or for CI.
- 500 Testcontainers Cloud runtime minutes per month for use either in Docker Desktop or for CI. Testcontainers Cloud runtime minutes do not rollover month to month.
- No Docker Hub image pull rate limits.

There are also advanced collaboration and management tools, including
Expand All @@ -115,10 +117,10 @@ Build Cloud, and Testcontainers Cloud.

Docker Business includes:

- 1500 Docker Build Cloud build minutes per month.
- 1500 Docker Build Cloud build minutes per month. Docker Build Cloud minutes do not
rollover month to month.
- Unlimited Docker Scout repositories with continuous vulnerability analysis.
- 1500 Testcontainers Cloud runtime minutes per month for use either in Docker Desktop or
for CI.
- 1500 Testcontainers Cloud runtime minutes per month for use either in Docker Desktop or for CI. Testcontainers Cloud runtime minutes do not rollover month to month.
- No Docker Hub image pull rate limits.

In addition, you gain access to enterprise-grade features, such as:
Expand Down Expand Up @@ -194,9 +196,9 @@ For a list of features available in each legacy tier, see [Legacy Docker Pricing

When you upgrade your Legacy Docker Pro plan to a Docker Pro subscription plan, your plan includes the following changes:

- Docker Build Cloud build minutes increased from 100/month to 200/month and no monthly fee.
- Docker Build Cloud build minutes increased from 100/month to 200/month and no monthly fee. Docker Build Cloud minutes do not rollover month to month.
- 2 included repositories with continuous vulnerability analysis in Docker Scout.
- 100 Testcontainers Cloud runtime minutes are now included for use either in Docker Desktop or for CI.
- 100 Testcontainers Cloud runtime minutes are now included for use either in Docker Desktop or for CI. Testcontainers Cloud runtime minutes do not rollover month to month.
- Docker Hub image pull rate limits are removed.

For a list of features available in each tier, see [Docker Pricing](https://www.docker.com/pricing/).
Expand Down Expand Up @@ -226,9 +228,9 @@ For a list of features available in each legacy tier, see [Legacy Docker Pricing
When you upgrade your Legacy Docker Team plan to a Docker Team subscription plan, your plan includes the following changes:

- Instead of paying an additional per-seat fee, Docker Build Cloud is now available to all users in your Docker plan.
- Docker Build Cloud build minutes increase from 400/mo to 500/mo.
- Docker Build Cloud build minutes increase from 400/mo to 500/mo. Docker Build Cloud minutes do not rollover month to month.
- Docker Scout now includes unlimited repositories with continuous vulnerability analysis, an increase from 3.
- 500 Testcontainers Cloud runtime minutes are now included for use either in Docker Desktop or for CI.
- 500 Testcontainers Cloud runtime minutes are now included for use either in Docker Desktop or for CI. Testcontainers Cloud runtime minutes do not rollover month to month.
- Docker Hub image pull rate limits are removed.
- The minimum number of users is 1 (lowered from 5).

Expand Down Expand Up @@ -258,9 +260,9 @@ For a list of features available in each tier, see [Legacy Docker Pricing](https
When you upgrade your Legacy Docker Business plan to a Docker Business subscription plan, your plan includes the following changes:

- Instead of paying an additional per-seat fee, Docker Build Cloud is now available to all users in your Docker plan.
- Docker Build Cloud included minutes increase from 800/mo to 1500/mo.
- Docker Build Cloud included minutes increase from 800/mo to 1500/mo. Docker Build Cloud minutes do not rollover month to month.
- Docker Scout now includes unlimited repositories with continuous vulnerability analysis, an increase from 3.
- 1500 Testcontainers Cloud runtime minutes are now included for use either in Docker Desktop or for CI.
- 1500 Testcontainers Cloud runtime minutes are now included for use either in Docker Desktop or for CI. Testcontainers Cloud runtime minutes do not rollover month to month.
- Docker Hub image pull rate limits are removed.

For a list of features available in each tier, see [Docker Pricing](https://www.docker.com/pricing/).
Expand Down
12 changes: 10 additions & 2 deletions content/manuals/subscription/scale.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,8 +24,7 @@ for legacy Docker subscription plans, all paid Docker subscriptions come with
access to Docker Hub, Docker Build Cloud, and Testcontainers Cloud with a base
amount of consumption. See [Docker subscriptions and features](./details.md) to
learn how much base consumption comes with each subscription. You can scale your
consumption at any time during your subscription period. All purchased
consumption expires at the end of your subscription term.
consumption at any time during your subscription period.

You can scale consumption for the following:

Expand All @@ -36,6 +35,15 @@ To better understand your needs, you can view your consumption at any time. For
more details, see [View Docker product
usage](../admin/organization/manage-products.md#view-docker-product-usage).

> [!WARNING]
>
> The number of Docker Build Cloud and Testcontainers minutes included in your
subscription do not rollover. Additional minutes expire at the end of your
subscription period (monthly or annually). For example, if you have an annual
Docker Team subscription with 500 included minutes, and purchase 500 additional
minutes, only the 500 additional minutes rollover until the end of your annual
subscription period.

## Add Docker Build Cloud build minutes

You can pre-purchase Docker Build Cloud build minutes in the Docker Build Cloud Dashboard:
Expand Down