Casdoor

Casdoor

https://casdoor.ai/

https://github.com/casdoor/casdoor

https://github.com/fanqingsong/fastapi-react-postgres-casdoor-sso

 

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

 

Casdoor: AI-First Identity and Access Management (IAM) / AI MCP Gateway

An open-source, AI-first IAM / MCP gateway and authentication server with a web UI.
Supporting MCP, A2A, OAuth 2.0, OIDC (OAuth 2.x), SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID,
Google Workspace, Azure AD, and more.

Documentation and guides: casdoor.ai

 

 

 

Why Casdoor

Casdoor is a UI-first identity provider and access management platform: one place to manage users, organizations, applications, and providers, with a modern web console. Authorization policies can be expressed with Casbin (ACL, RBAC, ABAC, and more). Unlike reverse-proxy-centric auth companions, Casdoor is a dedicated auth server with broad protocol support, designed to be straightforward to self-host and integrate—see casdoor.ai for documentation.

---

 

🌐 Live demos

Environment	URL	Description
Read-only	door.casdoor.com	Global demo; any modification or write operation will fail (read-only).
Writable	demo.casdoor.com	Full access for testing; data is reset about every 5 minutes.

Default demo admin login (where applicable): admin / 123 — use only for demos; change credentials on your own deployment.

 

✨ Features

🔐 Authentication OAuth 2.0 / OIDC — OpenID Connect and OAuth 2.x authorization SAML 2.0 — Enterprise SSO integration CAS — Central Authentication Service LDAP — Directory service integration WebAuthn / Passkeys — Passwordless authentication TOTP / MFA — Multi-factor authentication Face ID — Biometric authentication	🏢 Enterprise SCIM 2.0 — User provisioning RBAC — Role-based access control Social Login — Google, GitHub, Azure AD, and more Custom providers — Extensible identity providers User management — Web UI for administration Audit logs — Comprehensive logging Multi-tenancy — Organization support
🤖 AI & MCP MCP Gateway — Model Context Protocol support A2A Protocol — Agent-to-Agent communication AI-First Design — Built for AI applications	🛠️ Developer Experience RESTful API — Complete API coverage SDKs — Go, Java, Python, Node.js, and more Swagger UI — Interactive API documentation Webhooks — Event-driven integrations Customizable UI — Brand theming support

---

 

Technology stack

Casdoor is built as a frontend–backend separated project:

• Web UI: JavaScript and React (web/)
• API server: Go with Beego, RESTful APIs (repository root)
• Data: mainstream databases including MySQL, PostgreSQL, and others (overview)
• Cache: optional Redis for session/cache-style deployments (configure as needed)