casdoor/casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

What it solves

Casdoor is a self-hosted identity and access management (IAM) platform that allows developers to delegate authentication and user management to a single server. It removes the need for applications to handle passwords or build their own user directories, providing a centralized way to manage users, tokens, and access rules across multiple applications.

How it works

It functions as a complete identity provider (IdP) that stores user data and issues tokens. It supports a wide array of industry-standard protocols including OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, and SCIM 2.0. The platform includes a web console for administrative tasks, allowing organizations to configure sign-in methods, branding, and providers without redeploying code. For authorization, it integrates with Casbin to provide flexible, policy-based access control (ACL, RBAC, ABAC).

Who it’s for

Developers and organizations that want to own their user directory and need a centralized authentication server that supports both modern and legacy applications, as well as multi-tenancy.

Highlights

  • Multi-Protocol Support: Supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, and SCIM 2.0.
  • Comprehensive Authentication: Includes WebAuthn/passkeys, TOTP/MFA, and Face ID biometric sign-in.
  • AI Integration: Features an MCP gateway to control access to Model Context Protocol servers and support for agent-to-agent (A2A) communication.
  • Centralized Management: A web console for managing organizations, applications, and providers without config files.
  • Flexible Authorization: Built-in policy-based access control via Casbin.
  • Broad SDK Support: Official SDKs for Go, Java, Python, Node.js, .NET, PHP, and Rust.

Related

  • Project
    metorial/metorial

    An open-source identity and access layer for AI agents that provides standardized authentication, permissions, and observability across thousands of external system integrations.

  • Project
    oomol-lab/open-connector

    OpenConnector is an open‑source gateway that lets AI agents call thousands of SaaS APIs via a single, secure runtime. It handles OAuth/API‑key storage, provides a catalog of ready‑made actions, offers a web console and TypeScript SDK, and can be run locally, on Docker, Cloudflare Workers, Kubernetes, Fly.io, or as a managed OOMOL service.

  • Project
    53AI/53AIHub

    An open-source AI portal that allows users to quickly build and operate a production-grade hub for AI agents, prompts, and tools by integrating with existing AI platforms.

  • Project
    dcnetio/web-dc-api

    A decentralized application SDK for browsers that integrates wallet identity, private/shared databases, encrypted file storage, and real-time communication tools into a single API.

  • Project
    InsForge/InsForge

    An open-source backend platform that provides database, auth, and compute infrastructure specifically designed to be operated by AI coding agents.