add advanced security

Author: gary149

docs/hub/_toctree.yml

@@ -333,9 +333,11 @@
       - local: enterprise-hub-datasets
         title: Dataset viewer for Private datasets
       - local: enterprise-hub-resource-groups
-        title: Resource Groups (Advanced Access Control)
+        title: Resource Groups (Access Control)
       - local: advanced-compute-options
         title: Advanced Compute Options
+      - local: enterprise-hub-advanced-security
+        title: Advanced Security
       - local: enterprise-hub-tokens-management
         title: Tokens Management
       - local: enterprise-hub-analytics

docs/hub/enterprise-hub-advanced-security.md

@@ -0,0 +1,31 @@
+# Advanced Security
+
+<Tip warning={true}>
+This feature is part of the <a href="https://huggingface.co/enterprise" target="_blank">Enterprise Hub</a>.
+</Tip>
+
+Enterprise Hub organizations can improve their security posture with advanced security controls for both members and repositories.
+
+<div class="flex justify-center">
+    <img class="block dark:hidden !m-0" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/advanced-security.png" alt="screenshot of the Dataset Viewer on a private dataset owned by an Enterprise Hub organization."/>
+    <img class="hidden dark:block !m-0" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/advanced-security-dark.png" alt="screenshot of the Dataset Viewer on a private dataset owned by an Enterprise Hub organization."/>
+</div>
+
+## Members Security
+
+Configure additional security settings to protect your organization:
+
+- **Two-Factor Authentication (2FA)**: Require all organization members to enable 2FA for enhanced account security.
+- **User Approval**: For organizations with a verified domain name, require admin approval for new users with matching email addresses. This adds a verified badge to your organization page.
+
+## Repository Visibility Controls
+
+Manage the default visibility of repositories in your organization:
+
+- **Public by default**: New repositories are created with public visibility
+- **Private by default**: New repositories are created with private visibility. Note that changing this setting will not affect existing repositories.
+- **Private only**: Enforce private visibility for all new repositories, with only organization admins able to change visibility settings
+
+These settings help organizations maintain control over their intellectual property while enabling collaboration when needed.
+
+[Learn more about Enterprise security features →](/docs/hub/enterprise-hub-advanced-security)