Casdoor

A self-hosted identity and access management server with single sign-on, MFA and a web interface.

FreeOpen sourceWebSelf-hosted
Official websitegithub.com

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About Casdoor

Casdoor is an identity and access management and authentication server you run yourself. It provides single sign-on through OAuth, OIDC, SAML and CAS, connects to LDAP, supports SCIM provisioning, and offers WebAuthn, TOTP and other multi-factor methods, all managed from a web UI.

It can also sign users in with providers such as Google Workspace and Azure AD. Recent development adds a gateway for AI agents and MCP servers. The project is active, with thousands of commits.

Strengths

  • Supports OAuth, OIDC, SAML, CAS, LDAP and SCIM
  • Several MFA options including WebAuthn and TOTP
  • Web UI for managing users and applications
  • Active development

Limitations

  • Needs to be hosted and secured by you
  • Wide feature scope, including AI agent features, adds complexity

Details

Pricing
FreeFree and open source.
License
Apache-2.0
Developer
The Casdoor contributors
Platforms
Web, Self-hosted
How it runs
Self-hosted
Account
Not required
Best suited for
Teams wanting self-hosted single sign-on for their applications
Last verified
Added
Provenance
Facts checked against the developer's own pages and store listings, 1 sources on file.

Alternatives to Casdoor

Compare all

Software that can replace Casdoor for an important use case, and what changes if you switch.

  • Keycloak

    A self-hosted identity and access management server that adds single sign-on and login to applications.

    FreeOpen sourceSelf-hosted

    Keycloak is an Apache-licensed self-hosted SSO server with OIDC, SAML and LDAP brokering and an official Docker image, requiring real administrative effort to secure.

  • Zitadel

    An open-source identity and access management platform with SSO, MFA and a hosted login page.

    FreemiumOpen sourceWebSelf-hosted

    Zitadel is an open-source, self-hostable identity platform with MFA, passwordless login and multi-tenant APIs, aimed at developers integrating identity into apps.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm is an open-source identity server combining OAuth2, LDAP and passkeys with Linux login integration, though its ecosystem is smaller.

  • FusionAuth

    An identity and user management server with SSO, MFA and OAuth2 that can be self-hosted.

    FreemiumProprietaryWebSelf-hosted

    FusionAuth offers SSO, MFA and OAuth2 self-hosted or air-gapped, but it is not open source and advanced features require paid plans.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

    Microsoft Entra ID is a paid cloud identity service with single sign-on, removing self-hosting but tying you to Microsoft's platform.

  • JumpCloud

    A cloud directory platform for managing user identities, access and devices across several operating systems.

    PaidProprietaryWindowsmacOSLinuxAndroidWeb

    JumpCloud is a paid hosted directory adding device management, SSO, MFA and RADIUS, with no self-hosted option.

Casdoor as an alternative

Listings that name Casdoor as an alternative.

  • Authelia

    Self-hosted single sign-on and two-factor portal for reverse proxies.

    FreeOpen sourceLinuxWebSelf-hosted

    Casdoor is a self-hosted identity server supporting OAuth, OIDC, SAML, CAS, LDAP and SCIM with several MFA options and a web UI.

  • authentik

    Self-hosted identity provider for single sign-on and application access control.

    FreeOpen sourceLinuxSelf-hostedWeb

    Casdoor supports OAuth, OIDC, SAML, CAS, LDAP and SCIM with WebAuthn and TOTP MFA and a web management UI.

  • Pocket ID

    Small OpenID Connect provider that signs users in with passkeys only.

    FreeOpen sourceWebSelf-hosted

    Casdoor supports OAuth, OIDC, SAML, CAS, LDAP and SCIM with several MFA options and a web UI, though its wide feature scope adds complexity.

  • privacyIDEA

    Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.

    FreeOpen sourceLinuxSelf-hosted

    Casdoor is an open source identity server offering MFA including WebAuthn and TOTP together with SSO over OAuth, OIDC, SAML, LDAP and more.

Similar software

Related functionality, not necessarily a direct replacement.

Report a wrong fact or a dead link on this listing