Overview

Casdoor is an open-source Agent-first Identity and Access Management (IAM) platform with a web UI that supports OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, and MFA. What makes Casdoor unique is its focus on AI agent integration — it functions as an agent gateway for LLM applications, supporting MCP (Model Context Protocol) and OpenClaw protocols alongside traditional authentication protocols. This positions it as a bridge between conventional identity management and the emerging AI agent ecosystem.

Casdoor features a comprehensive web-based administration panel for managing users, organizations, applications, and policies. It supports social login integration with dozens of providers, customizable sign-in pages with theming, and a powerful permission management system based on Casbin, the popular authorization library originally developed by the same team. With built-in SMS and email verification, it’s designed for production-grade identity management out of the box.

Key Features

• Multi-Protocol Support: OAuth 2.0, OIDC 1.0, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn — all in a single platform.
• AI Agent Gateway: Native support for MCP (Model Context Protocol), OpenClaw, and LLM agent authentication protocols.
• Casbin Integration: Advanced permission management with the Casbin authorization library supporting ACL, RBAC, and ABAC models.
• Social Login: Built-in connectors for Google, GitHub, GitLab, WeChat, Alipay, and 50+ social identity providers.
• Two-Factor Authentication: TOTP, SMS OTP, email OTP, and recovery codes for account security.
• RADIUS Support: RADIUS authentication for network infrastructure and VPN integration.
• Management API: Full REST API for user, organization, and application management with SDKs in multiple languages.
• Customizable UI: Brandable sign-in pages with theming, custom CSS, and multi-language support (40+ languages).

Use Cases

• Managing identity for AI agent and LLM application ecosystems with MCP protocol support.
• Centralized IAM for organizations needing multi-protocol support (OAuth, SAML, LDAP, RADIUS).
• Building white-label SaaS platforms with customizable authentication pages and social login.
• Replacing commercial IAM solutions with a comprehensive, self-hosted platform.

Platforms

Linux, Docker, Kubernetes (cross-platform via Go binary)

Licence

Apache 2.0 (open source)

Website

casdoor.ai | github.com/casdoor/casdoor