What is Casdoor used for?

Casdoor is an open-source identity and access management platform written in Go, providing single sign-on, OAuth, OIDC, SAML, MFA and a web console for users and applications. It is a good fit for central login for multiple internal apps, federating Google Workspace or Entra ID sign-in, and securing AI agents and MCP servers.

Is Casdoor open source?

Yes. Casdoor is open source under the Apache-2.0 licence. Its source code is on GitHub at casdoor/casdoor and is written mainly in Go.

Yes. Casdoor is open source, so the software itself is free to use.

Can I self-host Casdoor?

Yes. Casdoor can be self-hosted on your own server or infrastructure.

What is Casdoor an alternative to?

Casdoor is an open-source alternative to Auth0, OneLogin, Microsoft Entra ID and Okta. Other open-source alternatives to Auth0 include Keycloak, Authentik and ZITADEL.

Is Casdoor actively maintained?

Yes. The most recent commit to Casdoor was on 2 October 2026, and the latest release is v4.13.0, published on 30 September 2026. The project has 15k stars on GitHub.

Casdoor: open-source alternative to Auth0, OneLogin

About Casdoor

Casdoor is a self-hosted identity and access management platform with a web console. It acts as a single sign-on and authentication server, so applications can delegate login to it instead of implementing their own user management, sessions and password handling.

Supported protocols include OIDC, OAuth 2.0, SAML 2.0, LDAP, CAS and SCIM 2.0, alongside WebAuthn, TOTP and MCP, and it can connect to identity providers such as Google Workspace, Microsoft Entra ID and GitHub. Sign-in options include passwords, email or SMS codes, WebAuthn and Face ID, plus any social providers you enable. The admin console covers users, tokens, organizations, providers and applications, and settings change without a redeploy or config file.

Casdoor is written in Go and licensed under Apache-2.0. A quick trial runs on SQLite with sample data and needs no separate database or config file. Its newer positioning emphasizes AI agents, with an MCP and agent gateway for LLM tooling, and hosted demo instances are available for trying it before installing.

Key features

Single sign-on and authentication server
OIDC, OAuth 2.0 and SAML support
LDAP, CAS and SCIM integration
WebAuthn, TOTP and MFA
Social and enterprise identity providers
Web console for users and organizations
MCP and agent gateway features

Good fit for

→Central login for multiple internal apps
→Federating Google Workspace or Entra ID sign-in
→Securing AI agents and MCP servers

Built with: Go
Tags: iam; sso; authentication; oauth; oidc; saml; ldap; mfa; self-hosted; mcp

Casdoor: questions and answers

What is Casdoor used for?: Casdoor is an open-source identity and access management platform written in Go, providing single sign-on, OAuth, OIDC, SAML, MFA and a web console for users and applications. It is a good fit for central login for multiple internal apps, federating Google Workspace or Entra ID sign-in, and securing AI agents and MCP servers.
Is Casdoor open source?: Yes. Casdoor is open source under the Apache-2.0 licence. Its source code is on GitHub at casdoor/casdoor and is written mainly in Go.
Is Casdoor free?: Yes. Casdoor is open source, so the software itself is free to use.
Can I self-host Casdoor?: Yes. Casdoor can be self-hosted on your own server or infrastructure.
What is Casdoor an alternative to?: Casdoor is an open-source alternative to Auth0, OneLogin, Microsoft Entra ID and Okta. Other open-source alternatives to Auth0 include Keycloak, Authentik and ZITADEL.
Is Casdoor actively maintained?: Yes. The most recent commit to Casdoor was on 2 October 2026, and the latest release is v4.13.0, published on 30 September 2026. The project has 15k stars on GitHub.