sbx: document sign-in enforcement for sandboxes by dvdksn · Pull Request #25263 · docker/docs

dvdksn · 2026-06-04T08:49:05Z

Summary

Adds an admin-facing guide for Docker Sandboxes organization sign-in enforcement: admins deploy an enforcement configuration via endpoint management (macOS configuration profile, Windows registry, Linux root-owned JSON file) specifying allowed Docker Hub org slugs, and sbx login verifies membership and revokes credentials on failure.

New page content/manuals/ai/sandboxes/governance/sign-in-enforcement.md covers how it works (login-time-only, fail-closed, auto-login behavior), the configuration schema, per-platform deployment, and error messages. Also cross-links from the governance overview and generalizes the security page's organization-control section so it makes a single point about admin-level controls rather than enumerating each feature.

Learnings

The sbx sign-in enforcement config is entirely endpoint/file-based (com.docker.sbx managed prefs, HKLM\SOFTWARE\Policies\Docker\SBX, /etc/docker-sbx/config.json) with no Admin Console UI — distinct from sandbox org policy (network/filesystem), which is Admin Console + API driven. Worth keeping these two admin mechanisms separate in the docs.

Generated by Claude Code

Add an admin-facing guide for organization sign-in enforcement (G-6), deployed via endpoint management (macOS configuration profile, Windows registry, Linux config file). Cross-link from the governance overview and generalize the security page's organization-control section. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

netlify · 2026-06-04T08:49:10Z

✅ Deploy Preview for docsdocker ready!

Name	Link
🔨 Latest commit	`769e4cf`
🔍 Latest deploy log	https://app.netlify.com/projects/docsdocker/deploys/6a2189257a21a400074df4a5
😎 Deploy Preview	https://deploy-preview-25263--docsdocker.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Use the source-path form (_index.md) so Hugo resolves the internal link; the published-URL form left the /manuals prefix unstripped and failed the htmltest link check. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docker-agent

Assessment: 🟡 NEEDS ATTENTION

dvdksn · 2026-06-04T09:00:47Z

+> [!NOTE]
+> Sandbox organization governance is available on a separate paid
+> subscription.
+> [Contact Docker Sales](https://www.docker.com/products/ai-governance/#contact-sales)
+> to request access.


@smnovick assuming this is gated by the governance license - is that right?

Technically is isn't - this feature will work regardless of whether a user has a license or not - that being said - I think we should just say this is part of the AI Governance offering.

Done in 769e4cf — reworded the callout to "Sign-in enforcement is part of Docker's AI Governance offering" and dropped the "separate paid subscription / request access" framing.

- Remove bold "Term." lead-ins from the consequences list (STYLE.md reserves bold for UI elements) - Reorder the page before the API reference (weight 22, grouped with organization policy) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

smnovick · 2026-06-04T13:04:53Z

+1. An administrator deploys an enforcement configuration to managed endpoints
+   through MDM, Group Policy, or configuration management, specifying one or
+   more allowed Docker Hub organization slugs.
+2. When a user runs `sbx login`, they authenticate with Docker Hub. Credentials


Should we remove "Hub"? Might confuse people. Just say "authenticate with Docker"

Done — changed to "authenticate with Docker". I also dropped "Hub" from the other organization references on the page (intro, step 1, and the allowedOrgs table row) so the terminology stays consistent.

smnovick · 2026-06-04T13:05:00Z

+   through MDM, Group Policy, or configuration management, specifying one or
+   more allowed Docker Hub organization slugs.
+2. When a user runs `sbx login`, they authenticate with Docker Hub. Credentials
+   are saved temporarily, then Docker Sandboxes calls the Docker Hub API to


Same comment as above with Hub

Done — now "Docker API".

smnovick · 2026-06-04T13:06:29Z

+   the credentials are kept.
+4. If not, Docker Sandboxes immediately revokes the saved credentials and the
+   user receives an [error message](#error-messages) listing the required
+   organizations. If the revocation fails, for example due to a keychain error,


Remove the line about using logging out manually - I think this is something claude picked up on based on comments - not something we should document

Removed in 769e4cf — dropped the "If the revocation fails... run sbx logout manually" sentence.

smnovick · 2026-06-04T13:06:30Z

+Other commands require a valid signed-in session, so they fail after a denied
+login until the user signs in with an allowed account.
+
+Enforcement applies at login time only. There's no per-command or per-request


Not sure we want to expose this

Removed — see the reply on the line-44 thread below.

smnovick · 2026-06-04T13:07:46Z

+Other commands require a valid signed-in session, so they fail after a denied
+login until the user signs in with an allowed account.
+
+Enforcement applies at login time only. There's no per-command or per-request


Not sure we want to expose this. Actually we shoudl remove everything from line 44 through 60

Done in 769e4cf — removed the entire block (login-time-only, fail-closed, the consequences bullets, and the sbx ls/sbx rm cleanup note).

smnovick · 2026-06-04T13:09:19Z

+
+On macOS, the configuration is a managed preferences domain, `com.docker.sbx`.
+
+Deploy it through any MDM solution, such as Jamf, Mosyle, Kandji, Intune, or


Some of these are pretty niche / odd - I would just say "Jamf or Intune"

Done — trimmed to "such as Jamf or Intune" and removed the now-unused Mosyle/Kandji entries from the Vale vocabulary.

smnovick · 2026-06-04T13:10:45Z

+{{< /tab >}}
+{{< tab name="Windows" >}}
+
+On Windows, the configuration is the registry key


Remove this line

Removed in 769e4cf — dropped the "On Windows, the configuration is the registry key..." intro sentence. Heads up: the path now appears only in the PowerShell commands here, while the macOS and Linux tabs still name their paths in prose. Happy to restore a one-line path mention for Windows, or trim mac/Linux too, for consistency — let me know which you prefer.

smnovick · 2026-06-04T13:10:46Z

+{{< tab name="Windows" >}}
+
+On Windows, the configuration is the registry key
+`HKLM\SOFTWARE\Policies\Docker\SBX`. The `HKLM\SOFTWARE\Policies\` hive is


Remove this line

Removed together with line 179 (see reply there).

smnovick · 2026-06-04T13:11:38Z

+as a configuration error and `sbx login` is denied with a descriptive message.
+Deploying with the commands above passes these checks.
+
+> [!NOTE]


Removed in 769e4cf — dropped the Linux weaker-enforcement note.

smnovick

left comments

- Frame the feature as part of the AI Governance offering (not a separate paid subscription) - Drop "Hub" from organization/API references to avoid confusion - Remove the manual-logout fallback sentence - Remove the login-time-only / fail-closed / consequences section - Trim the MDM example list to Jamf and Intune (drop unused vocab terms) - Remove the Windows registry-path intro and the Linux weaker-enforcement note Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

github-actions Bot added area/tests area/ai labels Jun 4, 2026

docker-agent reviewed Jun 4, 2026

View reviewed changes

Comment thread content/manuals/ai/sandboxes/governance/sign-in-enforcement.md Outdated

Comment thread content/manuals/ai/sandboxes/governance/sign-in-enforcement.md

dvdksn requested a review from smnovick June 4, 2026 08:58

dvdksn marked this pull request as ready for review June 4, 2026 08:58

dvdksn commented Jun 4, 2026

View reviewed changes

Comment thread content/manuals/ai/sandboxes/governance/sign-in-enforcement.md Outdated

dvdksn commented Jun 4, 2026

View reviewed changes

smnovick reviewed Jun 4, 2026

View reviewed changes

smnovick suggested changes Jun 4, 2026

View reviewed changes


		On macOS, the configuration is a managed preferences domain, `com.docker.sbx`.

		Deploy it through any MDM solution, such as Jamf, Mosyle, Kandji, Intune, or

Conversation

dvdksn commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Learnings

Uh oh!

netlify Bot commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for docsdocker ready!

Uh oh!

docker-agent left a comment

Choose a reason for hiding this comment

Assessment: 🟡 NEEDS ATTENTION

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

smnovick left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dvdksn commented Jun 4, 2026 •

edited

Loading

netlify Bot commented Jun 4, 2026 •

edited

Loading