Casdoor
Open-source identity and access management platform supporting OAuth 2.0, OIDC, SAML, and MCP.
Why consider Casdoor?
Casdoor is a self-hosted single sign-on and authentication platform featuring a web management console. It allows engineering teams to centralize user identities across standard protocols like OIDC, SAML, and OAuth 2.0.
Learn Casdoor by building
Practical setup notes, real use cases, and copy-ready examples in one focused guide.
In this guide4 sections
Overview and Protocol Architecture
Casdoor is a single sign-on (SSO) and authentication server with a web console that supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP protocols. As a complete identity provider (not an authentication proxy), it stores users, issues tokens, and provides an admin console to manage everything.
Casdoor is straightforward to self-host with a single Go binary and a database. No JVM, no operator, no cluster required.
Local Deployment and Quickstart
docker run -p 8000:8000 casbin/casdoor-all-in-oneOnce the container is operational, connect to the web console on port 8000. The sign-in interface uses separate organization and username fields, with initial default access configured for the built-in organization (username: admin, organization: built-in).
Console Configuration and Multi-Tenancy
Organizations, applications, providers, sign-in methods, and branding are configured in the web console instead of requiring configuration file edits and redeployments. This allows platform teams to adjust login flows, configure social identity providers, and customize login page branding without modifying static server configuration files.
Authorization Model
Access rules in Casdoor are expressed with Casbin supporting ACL, RBAC, ABAC, and custom authorization models. Because permissions are integrated with the identity system, teams can define role assignments and tenant-specific access policies alongside user accounts.
The project is licensed under the Apache License Version 2.0.
Related tools
More options with a similar category or technology profile.
diskus
Minimal, fast alternative to du -sh written in Rust using multi-threaded directory traversal.
peco
Simplistic interactive filtering tool for Unix pipelines, process lists, and file trees.
Dapr CLI
Command-line tool for managing Dapr distributed application runtime environments and sidecars.
Freeze
Generate beautiful image screenshots and SVGs of code snippets and terminal outputs.