Logo
Deploy Now

SaaS Alternative

Auth0 Firebase Auth Okta

Categories

Self-Hosted AI Security Authentication Identity Management SSO IAM OAuth

Stars

14,241

Forks

1,777

Watchers

79

Developer links

Last Updated: 08-21-2026 09:36 AM (UTC)

Casdoor

With 13,800+ GitHub stars and active releases through 2026, Casdoor is the open-source identity platform that ships OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn passkeys, TOTP multi-factor authentication, and Face ID biometric login in a single Go binary with a React web console — covering every authentication protocol your organization will ever need. Social login connects 50+ identity providers including Google, GitHub, Microsoft Azure AD, Facebook, WeChat, DingTalk, Apple, Twitter, and LinkedIn without custom code. The AI-first architecture includes a Model Context Protocol gateway for AI agent authentication and Agent-to-Agent protocol support for securing LLM-powered workflows. Built-in Casbin integration delivers authorization primitives beyond basic RBAC: attribute-based access control, relationship-based access control, and custom policy models through a unified engine. The organization-scoped multi-tenancy model isolates users, applications, and identity providers per tenant with customizable login pages, branding, and SMTP configuration. SCIM 2.0 endpoints automate user provisioning from HR systems and Active Directory. Official SDKs for Go, Java, Node.js, Python, and PHP accelerate application integration. The RESTful API exposes every resource for programmatic management. Comprehensive audit logs record authentication events and administrative actions. Deploy via Docker Compose with MySQL or PostgreSQL, the all-in-one SQLite Docker image for quick trials, or the official Kubernetes Helm chart for production clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Casdoor
Casdoor
Casdoor
Casdoor
Casdoor

Benefits

  • Every Authentication Protocol Covered
  • OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, WebAuthn passkeys, TOTP MFA, Face ID, and SCIM 2.0 provisioning in a single platform. No need for multiple identity solutions.
  • Fifty Plus Social Login Providers
  • Google, GitHub, Azure AD, Facebook, Apple, WeChat, DingTalk, Twitter, LinkedIn, and dozens more social identity providers connect without custom integration code.
  • Casbin Powered Authorization Engine
  • Native integration with the Casbin authorization library enables RBAC, ABAC, and relationship-based access control with custom policy models beyond basic role assignments.
  • AI First MCP Gateway Design
  • Model Context Protocol gateway and Agent-to-Agent protocol support secure AI agent authentication and LLM-powered application workflows with fine-grained identity-aware access control.

Features

  • Web Administration Console
  • React-based dashboard for managing users, organizations, applications, identity providers, roles, permissions, and tokens with real-time search and audit log viewing.
  • Multi Tenancy Organizations
  • Organization-scoped isolation for users, applications, and providers with per-tenant customizable login pages, branding themes, and independent SMTP configuration.
  • SCIM User Provisioning
  • SCIM 2.0 server endpoints automate user and group lifecycle management from HR systems, Active Directory, and Google Workspace with standardized provisioning.
  • Passwordless Authentication
  • WebAuthn and FIDO2 passkey support enables passwordless login with hardware security keys, platform authenticators, and biometric Face ID verification.
  • Multi Language SDKs
  • Official client SDKs for Go, Java, Node.js, Python, and PHP with comprehensive documentation. RESTful API exposes every resource for custom integration.
  • Flexible Database Support
  • Connect to MySQL, PostgreSQL, CockroachDB, or SQLite with optional Redis caching. All-in-one Docker image with embedded SQLite for instant evaluation.