Casdoor
A self-hosted identity and access management server with a web console, speaking OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP and MCP, and connecting to providers such as Google Workspace and GitHub.
Casdoor is a self-hosted single sign-on and identity and access management server with a web console. It speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP-based multi-factor authentication and MCP, and connects to identity providers such as Google Workspace, Microsoft Entra ID, GitHub and others, so an application can delegate sign-in entirely instead of handling passwords itself.
It is a complete identity provider rather than an authentication proxy or an embedded library: it stores users, issues tokens, and provides an admin console for managing users, tokens, organizations, applications and provider settings, all configurable without a redeploy or a config file. The sign-in page it presents to end users supports passwords, email or SMS codes, WebAuthn, Face ID and any enabled social provider.
It can be tried with a single Docker command that runs it on SQLite with sample data, or against writable and read-only hosted demo instances, both using the same built-in admin account.