Casdoor
UI-first Identity and Access Management platform supporting OAuth 2.0, OIDC, SAML, WebAuthn, MFA, and integration with Google Workspace, Active Directory.
Casdoor is a comprehensive open-source Identity and Access Management (IAM) platform designed with a UI-first approach that makes authentication management accessible and intuitive. The platform provides robust Single-Sign-On (SSO) capabilities with extensive protocol support.
Key Features:
- Multiple Authentication Protocols: Native support for OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, and Kerberos
- Advanced Security: WebAuthn, TOTP, Multi-Factor Authentication (MFA), and RADIUS integration
- Enterprise Integration: Seamless connectivity with Google Workspace and Active Directory
- Frontend-Backend Separation: Modern architecture supporting high concurrency with manageable web UI
- Multi-Language Support: Internationalization (i18n) for global deployment
Benefits:
- Easy Setup: Deploy authentication management in just a few steps
- Third-Party Login: Extensive social network login options with plugin extensibility
- User Management: Complete user lifecycle management including registration, password recovery, and profile management
- Developer-Friendly: Comprehensive SDK with identity authentication, user management, and resource upload functions
Proven at Scale: Trusted by hundreds of projects from Fortune 500 companies to innovative startups, demonstrating enterprise-grade reliability and scalability.
Configuration parameters like SessionOn and inactiveTimeoutMinutes allow enabling sessions and controlling session expiry. Sessions can be stored in Redis or locally
Administrators can configure webhooks that trigger on events such as user signup, login, logout or update
Admins can import users by uploading an XLSX file and map fields to Casdoor user properties
Multi‑tenancy is built‑in. An organization manages its own users and applications and users can access all applications within the organization
Casdoor includes a web‑based admin dashboard where administrators can manage users, organizations and settings
Users can be exported via the userinfo API endpoint
Paid plans offer service level agreements of 99.9% or 99.99% availability
Provides runtime monitoring of CPU, memory, API latency and throughput via the web UI and exposes metrics for Prometheus
