Casdoor

An open-source, self-hosted identity and access management platform

Casdoor is a single sign-on (SSO) and authentication server with a web console.
It speaks <strong>OAuth&nbsp;2.0</strong>, <strong>OIDC</strong>, <strong>SAML&nbsp;2.0</strong>, <strong>CAS</strong>, <strong>LDAP</strong>, <strong>SCIM&nbsp;2.0</strong>, <strong>WebAuthn</strong>, <strong>TOTP/MFA</strong> and <strong>MCP</strong>,
and connects to Google Workspace, Microsoft Entra ID (Azure AD), GitHub and many other identity providers.



<strong>Website</strong> &middot;
<strong>Documentation</strong> &middot;
<strong>Live demo</strong> &middot;
<strong>Casdoor Cloud</strong> &middot;
<strong>Discord</strong>

The sign-in page your users see: password, email/SMS code, WebAuthn and Face ID, plus every social provider you enable.

  <b>Admin console.</b> Users, tokens, organizations and providers at a glance.
</td>
<td width="33%" valign="top" align="center">
  
  <b>Applications.</b> Every app that delegates login to Casdoor, across all organizations.
</td>
<td width="33%" valign="top" align="center">
  
  <b>Application settings.</b> OAuth, SAML, providers and branding — no redeploy, no config file.
</td>

❤️ Sponsors

Want to appear here?

🚀 Try it in 30 seconds

No database and no config file needed. This runs Casdoor on SQLite with sample data:

docker run -p 8000:8000 casbin/casdoor-all-in-one

Open http://localhost:8000 and sign in:

The sign-in form has separate organization and username fields. Docs sometimes write this pair as built-in/admin — that is the same thing, not a username containing a slash.

Prefer not to install anything? Use the hosted demos:

Both accept the same built-in / admin / 123 credentials.

Want it hosted for production instead? Casdoor Cloud runs a dedicated Casdoor instance and database for you, kept up to date by the Casdoor team. It is the same open-source Casdoor, so you can move between Cloud and self-hosting at any time. New accounts get $20 in free credit to try it, so you can start a free trial without talking to anyone.

🤔 Why Casdoor

Casdoor is a complete identity provider, not an authentication proxy and not a library you embed. It stores your users, issues the tokens, and gives you an admin console to manage all of it — so your applications can delegate login entirely and never handle a password themselves.