#3333rd of 102 in Backends, databases and hosting
casdoor
Self-hosted SSO and identity provider with web console
- Stars
- 14.8k
- License
- Apache-2.0
- Last commit
- Nov 2026
- Last release
- Nov 2026
- Language
- Go
13,297 on 21 Apr 202614,828 on 10 Nov 2026
From GitHub's daily star counts.
Checked on GitHub.
Before you pick it
- Known advisory in latest version. 28 known advisories: github.com/casdoor/casdoor v1.1000.0, the latest version. Source (opens in a new tab), checked .
Overview
Casdoor is a Go identity and access management server that stores users, issues tokens and provides a web console. It supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn and TOTP/MFA, with social login via Google, GitHub and Entra ID. It also includes an MCP gateway and A2A support, and authorization uses Casbin models.
Who it is for: Teams that want to self-host SSO and own their user directory
Strengths
- Many protocols on one user directory: OAuth, OIDC, SAML, CAS, LDAP, SCIM
- Organizations, applications and providers editable in the UI without redeploy
- Config as code via init data file and an official Terraform provider
- SDKs for Go, Java, Python, Node.js, .NET, PHP and Rust, plus app Marketplace
Weaknesses
- All-in-one Docker image keeps SQLite data in the container; not for production
- Compose file builds from source, so first start takes several minutes
- Running more than one replica requires Redis
- Old Ant Design console is no longer built; upgrading from v3 to v4 needs a guide
What it needs
- no GPU
- Docker + Compose
- Needs MySQL, PostgreSQL, SQLite or SQL Server, Redis (optional, needed for multiple replicas)
- port 8000
Quick answers
Is casdoor open source?
Yes. Its code is on GitHub under the Apache-2.0 license.
Can you run casdoor with Docker?
Yes. Its repository has a Docker setup: a Dockerfile, a Compose file or a published image.
Also in Backends, databases and hosting
See all 102| Rank | Project | Score |
|---|---|---|
| 1 | bunJavaScript and TypeScript runtime with bundler, test runner and package manager | 93 out of 100 |
| 2 | strapiHeadless CMS that generates REST and GraphQL APIs from content models | 92 out of 100 |
| 3 | traefikHTTP reverse proxy and load balancer that auto-discovers routes from orchestrators | 92 out of 100 |
| #4 | appwriteBackend with auth, databases, storage, functions and an MCP server for agents | 92 out of 100 |
| #5 | medusaNode.js commerce platform with modular products, carts, orders and payments | 92 out of 100 |