🔒 Security & Privacy Intermediate

Casdoor

by casdoor

Modern Self-Hosted Identity Platform with Multi-Protocol Auth

Production-ready IAM solution offering unified user management, SSO, and authentication across OAuth, SAML, LDAP, and 10+ protocols with a modern UI.

12,906 Stars
1,542 Forks
12,906 Watchers
108 Issues
🔒

About This Project

Casdoor delivers a comprehensive identity and access management platform designed for organizations seeking complete control over their authentication infrastructure. Unlike fragmented solutions requiring multiple tools, it consolidates user authentication, authorization, and single sign-on capabilities into a unified system with an intuitive web interface.

Built for modern security requirements, the platform supports passwordless authentication through WebAuthn and Face ID, multi-factor authentication with TOTP, and traditional enterprise protocols like LDAP, SAML, and Kerberos. This flexibility allows seamless integration with both legacy systems and cutting-edge applications without vendor lock-in.

The project stands out with its UI-first approach, making complex IAM operations accessible through visual configuration rather than extensive coding. Administrators can manage users, configure authentication flows, and integrate applications through an elegant dashboard. Written in Go, it offers excellent performance and straightforward deployment as a single binary.

Recent additions include AI gateway and LLM gateway capabilities, positioning Casdoor as a forward-thinking solution that secures not just traditional applications but also emerging AI-powered services and model context protocol integrations.

Key Features

  • Support for 10+ authentication protocols including OAuth 2.0, OIDC, SAML, LDAP, and RADIUS
  • Modern passwordless authentication with WebAuthn, Face ID, and TOTP-based MFA
  • Visual admin dashboard for user management and application integration
  • AI/LLM gateway integration for securing machine learning services
  • Active Directory and Google Workspace synchronization with SCIM provisioning

How You Can Use It

1

Implementing enterprise SSO across internal applications and SaaS tools

2

Replacing proprietary identity providers like Auth0 or Okta with self-hosted infrastructure

3

Securing AI/LLM services with unified authentication and access control

4

Migrating from legacy Active Directory while maintaining backward compatibility

Who Is This For?

DevOps engineers, platform architects, and organizations requiring self-hosted identity management with enterprise-grade features and compliance requirements