Casdoor

Casdoor is a fully open-source, UI-first Identity and Access Management (IAM) platform designed to act as a centralized authentication server for your application ecosystem. Built with Go and a React frontend, it supports OAuth 2.0, OpenID Connect (OIDC), SAML, CAS, and LDAP protocols out of the box, making it compatible with virtually any web application, API, or internal tool that requires user authentication. With over 13,500 GitHub stars and nearly 1,900 releases, Casdoor is actively maintained and widely adopted across enterprise and developer communities.

Common Use Cases

Development teams use Casdoor as a centralized identity provider for internal tools, dashboards, CI/CD systems, and APIs — replacing scattered per-app login systems with one trusted authentication service. Product teams building multi-tenant SaaS products rely on Casdoor's organization management to isolate customer user pools, customize login experiences per tenant, and manage subscriptions. Enterprise IT departments connect Casdoor to existing Active Directory or LDAP infrastructure, enabling seamless single sign-on across on-premises and cloud applications. Security-focused teams enforce multi-factor authentication policies per application through Casdoor's MFA management and use built-in audit logging to track authentication events for compliance purposes.

Key Features

• OAuth 2.0, OpenID Connect, SAML, CAS, and LDAP protocol support
• Multi-factor authentication: TOTP, WebAuthn, SMS, email, and Face ID
• Social login connectors for GitHub, Google, Microsoft, WeChat, and 30+ providers
• Fine-grained access control: ACL, RBAC, and ABAC via built-in Casbin integration
• Multi-tenancy: isolated organizations with separate user pools and policies
• SCIM 2.0 provisioning for enterprise directory synchronization
• Built-in LDAP server (port 389) and RADIUS server (port 1812)
• User management UI with registration, login, and self-service password reset pages
• REST API with Swagger UI and SDKs for Go, Java, Python, Node.js, PHP, .NET, and Rust
• Webhook support for user lifecycle events and full audit trail logging
• Customizable login pages with branding and white-label support
• AI MCP gateway for agent-to-agent authentication

Why deploy Casdoor on Hostinger VPS

Deploying Casdoor on Hostinger VPS gives you complete sovereignty over your users' credentials, session data, and authentication infrastructure — something impossible with hosted identity providers. A dedicated VPS ensures consistent performance for authentication requests, which are on the critical path of every user interaction across all your connected applications. Self-hosting eliminates per-user pricing that makes commercial IAM platforms expensive at scale, and gives you full flexibility to customize authentication flows, integrate with internal systems, and comply with data residency requirements. With root access to the environment, you can restrict Casdoor's network exposure, implement custom security policies, and scale resources as your user base grows.