Casdoor Review, Pricing & Features

Casdoor is a free, open-source IAM and SSO platform with a web UI, supporting OAuth 2.0, OIDC, SAML, LDAP, WebAuthn, and MFA for self-hosted deployment.

Category
Security
Pricing
Free/Open-source (self-hosted), from Free
Verified
Not yet
Last updated
July 18, 2026
Founded
2020
Web AppAPIOpen SourceAISelf-Hosted

Overview

Casdoor is an open-source identity and access management (IAM) and single sign-on (SSO) platform created around 2020 by Yang Luo, the same developer behind the Casbin authorization library. It began under the Casbin GitHub organization before moving to its own dedicated casdoor organization, and is licensed under Apache 2.0 for free, self-hosted deployment.

Rather than acting only as a reverse-proxy gatekeeper in front of existing apps, Casdoor runs as a dedicated auth server with a full web-based admin console for managing users, organizations, applications, and identity providers.

Key Features

Casdoor supports a broad set of authentication protocols in one self-hosted deployment: OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP-based MFA, and Face ID, along with integrations for 100+ third-party identity providers including Google, Azure AD, and GitHub.

Because it was built by Casbin's creator, Casdoor integrates natively with Casbin for fine-grained authorization (RBAC, ABAC) on top of authentication. More recent development has added native Model Context Protocol (MCP) server support and OAuth 2.1 flows for authenticating AI agents.

Pricing

Casdoor is free and open-source with no pricing tiers or subscription plans; it is self-hosted, so the only costs organizations incur are their own hosting and operational overhead.

There is no official vendor support contract or SLA — support comes from the open-source community and project maintainers, similar to other self-hosted IAM tools like Keycloak and Authentik.

Key Features

Pros & Cons

Pros

  • Broad protocol support (OAuth, OIDC, SAML, CAS, LDAP) in a single self-hosted deployment
  • Tight, native integration with Casbin for fine-grained authorization
  • Actively developed, including newer AI-agent authentication support via MCP/OAuth 2.1
  • Free and open source under Apache 2.0
  • UI-first design makes administration more approachable than many developer-only IAM tools

Cons

  • Self-hosting requires the team to own its own operations and security
  • Smaller ecosystem and community than commercial IAM vendors like Okta or Auth0
  • No official vendor support contract or SLA
  • Documentation and tooling are geared more toward developers than non-technical admins

Frequently Asked Questions

Is Casdoor free?

Yes, Casdoor is free and open-source under the Apache 2.0 license, with no pricing tiers or subscription fees; users only pay for their own hosting.

What authentication protocols does Casdoor support?

Casdoor supports OAuth 2.0, OpenID Connect (OIDC), SAML, CAS, LDAP, SCIM, WebAuthn, TOTP-based MFA, and Face ID, plus 100+ third-party identity provider integrations.

How does Casdoor relate to Casbin?

Casdoor was created by the same developer as the Casbin authorization library and uses Casbin natively as its underlying policy engine for fine-grained access control.

Can Casdoor authenticate AI agents?

Yes, Casdoor has added native Model Context Protocol (MCP) server support and OAuth 2.1 flows aimed at authenticating AI agents and tools, in addition to traditional human user SSO.

Is Casdoor a hosted service or self-hosted?

Casdoor is self-hosted; organizations deploy and manage their own instance rather than using a managed cloud service.

Comparisons

Related Tools