Casdoor
by casdoor
Modern Self-Hosted Identity Platform with Multi-Protocol Auth
Production-ready IAM solution offering unified user management, SSO, and authentication across OAuth, SAML, LDAP, and 10+ protocols with a modern UI.
- 12,906+ GitHub stars
- Built with Go
- Support for 10+ authentication protocols including OAuth 2.0, OIDC, SAML, LDAP, and RADIUS
- Apache License 2.0 license
About This Project
Casdoor delivers a comprehensive identity and access management platform designed for organizations seeking complete control over their authentication infrastructure. Unlike fragmented solutions requiring multiple tools, it consolidates user authentication, authorization, and single sign-on capabilities into a unified system with an intuitive web interface.
Built for modern security requirements, the platform supports passwordless authentication through WebAuthn and Face ID, multi-factor authentication with TOTP, and traditional enterprise protocols like LDAP, SAML, and Kerberos. This flexibility allows seamless integration with both legacy systems and cutting-edge applications without vendor lock-in.
The project stands out with its UI-first approach, making complex IAM operations accessible through visual configuration rather than extensive coding. Administrators can manage users, configure authentication flows, and integrate applications through an elegant dashboard. Written in Go, it offers excellent performance and straightforward deployment as a single binary.
Recent additions include AI gateway and LLM gateway capabilities, positioning Casdoor as a forward-thinking solution that secures not just traditional applications but also emerging AI-powered services and model context protocol integrations.
Key Features
- Support for 10+ authentication protocols including OAuth 2.0, OIDC, SAML, LDAP, and RADIUS
- Modern passwordless authentication with WebAuthn, Face ID, and TOTP-based MFA
- Visual admin dashboard for user management and application integration
- AI/LLM gateway integration for securing machine learning services
- Active Directory and Google Workspace synchronization with SCIM provisioning
How You Can Use It
Implementing enterprise SSO across internal applications and SaaS tools
Replacing proprietary identity providers like Auth0 or Okta with self-hosted infrastructure
Securing AI/LLM services with unified authentication and access control
Migrating from legacy Active Directory while maintaining backward compatibility
Who Is This For?
DevOps engineers, platform architects, and organizations requiring self-hosted identity management with enterprise-grade features and compliance requirements