Alternatives to Casdoor

A self-hosted identity and access management server with single sign-on, MFA and a web interface. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as Casdoor.

  • Keycloak

    A self-hosted identity and access management server that adds single sign-on and login to applications.

    FreeOpen sourceSelf-hosted

    Keycloak is an Apache-licensed self-hosted SSO server with OIDC, SAML and LDAP brokering and an official Docker image, requiring real administrative effort to secure.

  • Zitadel

    An open-source identity and access management platform with SSO, MFA and a hosted login page.

    FreemiumOpen sourceWebSelf-hosted

    Zitadel is an open-source, self-hostable identity platform with MFA, passwordless login and multi-tenant APIs, aimed at developers integrating identity into apps.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm is an open-source identity server combining OAuth2, LDAP and passkeys with Linux login integration, though its ecosystem is smaller.

  • FusionAuth

    An identity and user management server with SSO, MFA and OAuth2 that can be self-hosted.

    FreemiumProprietaryWebSelf-hosted

    FusionAuth offers SSO, MFA and OAuth2 self-hosted or air-gapped, but it is not open source and advanced features require paid plans.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

    Microsoft Entra ID is a paid cloud identity service with single sign-on, removing self-hosting but tying you to Microsoft's platform.

  • JumpCloud

    A cloud directory platform for managing user identities, access and devices across several operating systems.

    PaidProprietaryWindowsmacOSLinuxAndroidWeb

    JumpCloud is a paid hosted directory adding device management, SSO, MFA and RADIUS, with no self-hosted option.

Also worth comparing

These listings name Casdoor as their own alternative, so the relationship runs both ways.

  • Authelia

    Self-hosted single sign-on and two-factor portal for reverse proxies.

    FreeOpen sourceLinuxWebSelf-hosted

    Casdoor is a self-hosted identity server supporting OAuth, OIDC, SAML, CAS, LDAP and SCIM with several MFA options and a web UI.

  • authentik

    Self-hosted identity provider for single sign-on and application access control.

    FreeOpen sourceLinuxSelf-hostedWeb

    Casdoor supports OAuth, OIDC, SAML, CAS, LDAP and SCIM with WebAuthn and TOTP MFA and a web management UI.

  • Pocket ID

    Small OpenID Connect provider that signs users in with passkeys only.

    FreeOpen sourceWebSelf-hosted

    Casdoor supports OAuth, OIDC, SAML, CAS, LDAP and SCIM with several MFA options and a web UI, though its wide feature scope adds complexity.

  • privacyIDEA

    Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.

    FreeOpen sourceLinuxSelf-hosted

    Casdoor is an open source identity server offering MFA including WebAuthn and TOTP together with SSO over OAuth, OIDC, SAML, LDAP and more.

Similar software

Related functionality, not a direct replacement.