
Casdoor
UI-first IAM and SSO platform for modern authentication
14.1k stars 1.8k forks last commit first released Apache-2.0
Actively maintained
Last commit 24 Jul 2026.
Casdoor is an open-source, UI-first Identity and Access Management (IAM) and Single Sign-On (SSO) platform that provides a web-based admin console for managing users, organizations, and authentication flows. It is designed to integrate with applications via standard identity protocols and offers extensible user authentication options.
Key Features
- Web UI for user, organization, application and permission management
- SSO and federation support via OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0
- Directory and provisioning integrations including LDAP and SCIM
- Multiple authentication methods including WebAuthn and TOTP-based MFA
- Built-in registration, email verification, and password recovery flows
- Public REST API and SDKs to simplify application integration
Use Cases
- Centralized login and SSO for internal apps and SaaS-style multi-tenant products
- Adding MFA and modern authentication (OIDC/WebAuthn) to existing services
- User lifecycle management and provisioning across connected systems
Casdoor fits teams that want an admin-friendly IAM/SSO solution with broad protocol support and a ready-to-use web console. It is especially useful when you need standards-based SSO plus flexible authentication methods in one deployable service.
Categories:
Tags:
Tech Stack:
Similar to Casdoor

Authgear
Identity and authentication platform for apps and APIs
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.

authentik
Open-source Identity Provider (IdP) for SSO, OIDC, and SAML
Open-source IdP delivering SSO, OAuth2/OIDC, SAML2, LDAP, RADIUS, MFA, WebAuthn, conditional access and application-proxy capabilities for self-hosted deployments.

Logto
Authentication and authorization platform for apps and APIs
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.
Keycloak
Open-source identity and access management with SSO
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.
ZITADEL
API-first identity and access management platform for applications
ZITADEL is an open source IAM/CIAM platform providing SSO, MFA, OIDC/OAuth2, SAML, user management, and multi-tenant organizations with audit logging.

FusionAuth
Self-hosted identity and access management for applications
FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.


