Overview

An open-source AI-first Identity and Access Management (IAM) /AI MCP gateway and auth server with web UI supporting MCP, A2A, OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD Identity & Access Management for the AI Agent era. The first open-source IAM platform with native MCP server, OAuth 2.1 for AI agents, and full support for OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, MFA, and 100+ identity providers. 📦⚡️ Casdoor An open-source AI-first Identity and Access Management (IAM) /AI MCP gateway and auth server with web UI supporting MCP, A2A, OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD The project has 13K+ GitHub stars and is licensed under Apache-2.0.

Getting Started

Source: GitHub README

By source code: https://casdoor.org/docs/basic/server-installation
By Docker: https://casdoor.org/docs/basic/try-with-docker
By Kubernetes Helm: https://casdoor.org/docs/basic/try-with-helm

Normalized Features

Source: tool-features-normalized.json

docker, kubernetes, ldap, rest api, sso, two factor auth.

Deploy

Docker

Self-host with Docker Compose

Coolify

One-click via Coolify panel

Elestio

Managed hosting from $9/mo

PikaPods

Simple managed hosting

Features

Authentication & Access

LDAP / Active Directory
Single Sign-On (SSO)
Two-Factor Authentication

Integrations & APIs

REST API

Replaces

Okta

25 tools

Compare Casdoor

Authelia vs

Casdoor

Both are security tools. Authelia has 4 unique features, Casdoor has 2.

Authentik vs

Casdoor

Both are security tools. Authentik has 2 unique features, Casdoor has 2.

Casdoor vs

ORY

Both are security tools. Casdoor has 2 unique features, ORY has 2.

Related Security & Authentication Tools

View all 159 →

Ghidra

66K

A free, open-source software reverse engineering framework created by the NSA — disassemble, decompile, and analyze compiled code on any platform.

security Apache-2.0

PocketBase

58K

Open-source backend in a single 12 MB binary — realtime database, auth, file storage, and admin dashboard. No Docker, no Postgres, just run it.

security MIT Easy to deploy

Vaultwarden

57K

Lightweight, self-hosted Bitwarden-compatible password manager written in Rust. Uses 10x less RAM than the official server and works with all Bitwarden clients.

security AGPL-3.0

Zen Browser

41K

Zen Browser is a privacy-focused, beautifully designed Firefox fork with a unique sidebar tab layout, split views, and built-in content blocking — no telemetry, no tracking.

security MPL-2.0