casdoor

<div align="center"> <a href="https://casdoor.ai"> <img src="https://cdn.casbin.org/img/casdoor-logo_1185x256.png" alt="Casdoor" width="500"> </a> <h3>Casdoor: AI-First Identity and Access Management (IAM) / AI MCP Gateway</h3> <p align="center"> <strong>An open-source, AI-first IAM / MCP gateway and authentication server with a web UI.</strong><br> Supporting MCP, A2A, OAuth&nbsp;2.0, OIDC (OAuth&nbsp;2.x), SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID,<br> Google Workspace, Azure AD, and more. </p> <p align="center"> <a href="https://casdoor.ai/"><strong>Documentation and guides: casdoor.ai</strong></a> </p> <p> <a href="https://casdoor.ai/docs/overview"> <img src="https://img.shields.io/badge/documentation-casdoor.ai%2Fdocs-1890ff?style=flat-square&logo=readthedocs&logoColor=white" alt="Documentation"> </a> <a href="https://github.com/casdoor/casdoor/releases/latest"> <img src="https://img.shields.io/github/v/release/casdoor/casdoor?style=flat-square&color=blue" alt="GitHub Release"> </a> <a href="https://hub.docker.com/r/casbin/casdoor"> <img src="https://img.shields.io/docker/pulls/casbin/casdoor?style=flat-square&color=brightgreen" alt="Docker Pulls"> </a> <a href="https://github.com/casdoor/casdoor/actions/workflows/build.yml"> <img src="https://img.shields.io/github/actions/workflow/status/casdoor/casdoor/build.yml?style=flat-square&label=build" alt="Build Status"> </a> <a href="https://goreportcard.com/report/github.com/casdoor/casdoor"> <img src="https://goreportcard.com/badge/github.com/casdoor/casdoor?style=flat-square" alt="Go Report Card"> </a> <a href="https://github.com/casdoor/casdoor/blob/master/LICENSE"> <img src="https://img.shields.io/github/license/casdoor/casdoor?style=flat-square&color=orange" alt="License"> </a> </p> <p> <a href="https://github.com/casdoor/casdoor/stargazers"> <img src="https://img.shields.io/github/stars/casdoor/casdoor?style=flat-square&color=yellow" alt="GitHub Stars"> </a> <a href="https://github.com/casdoor/casdoor/network/members"> <img src="https://img.shields.io/github/forks/casdoor/casdoor?style=flat-square" alt="GitHub Forks"> </a> <a href="https://github.com/casdoor/casdoor/issues"> <img src="https://img.shields.io/github/issues/casdoor/casdoor?style=flat-square&color=red" alt="GitHub Issues"> </a> <a href="https://discord.gg/5rPsrAzK7S"> <img src="https://img.shields.io/discord/1022748306096537660?style=flat-square&logo=discord&label=Discord&color=5865F2" alt="Discord"> </a> <a href="https://crowdin.com/project/casdoor-site"> <img src="https://badges.crowdin.net/casdoor-site/localized.svg" alt="Crowdin"> </a> </p> <p align="center"> <a href="https://casdoor.ai"><strong>Website</strong></a> · <a href="https://casdoor.ai/docs/overview"><strong>Documentation</strong></a> · <a href="https://door.casdoor.com"><strong>Live demo</strong></a> · <a href="https://discord.gg/5rPsrAzK7S"><strong>Discord</strong></a> </p> </div>

---

Table of contents

• Why Casdoor
• Live demos
• Quick start
• Features
• Technology stack
• Documentation
• Integrations
• Security
• Community and support
• Contributing
• Donate
• License

---

<a id="why-casdoor"></a>

Why Casdoor

Casdoor is a UI-first identity provider and access management platform: one place to manage users, organizations, applications, and providers, with a modern web console. Authorization policies can be expressed with Casbin (ACL, RBAC, ABAC, and more). Unlike reverse-proxy-centric auth companions, Casdoor is a dedicated auth server with broad protocol support, designed to be straightforward to self-host and integrate—see casdoor.ai for documentation.

---

<a id="live-demos"></a>

🌐 Live demos

Environment	URL	Description
Read-only	door.casdoor.com	Global demo; any modification or write operation will fail (read-only).
Writable	demo.casdoor.com	Full access for testing; data is reset about every 5 minutes.

Default demo admin login (where applicable): admin / 123 — use only for demos; change credentials on your own deployment.

---

<a id="quick-start"></a>

🚀 Quick start

Pick one deployment method below. To keep behavior consistent with upstream, the steps are aligned with official docs.

🛠️ Source code (default)

1. Install dependencies: Go 1.25 (follow go.mod), Node.js LTS (20), Yarn 1.x, and a supported database.
2. Clone the repository:

git clone https://github.com/casdoor/casdoor.git
cd casdoor

3. Configure database in conf/app.conf (at minimum set driverName, dataSourceName, and dbName; for MySQL create database casdoor first).
4. Build frontend and start backend:

cd web
yarn install
yarn build
cd ..
go run main.go

5. Open http://localhost:8000 and sign in with built-in/admin / 123 on a fresh install (change password immediately in production).

Official guide: Server installation

🐳 Docker

Use one of the official Docker paths:

• All-in-one (SQLite quick trial):

docker run -p 8000:8000 casbin/casdoor-all-in-one

• Docker Compose (with your conf/app.conf next to docker-compose.yml):

docker compose up

Then open http://localhost:8000 and sign in with built-in/admin / 123 on a fresh install.

Official guide: Try with Docker

☸️ Kubernetes Helm

With Helm v3 and a running Kubernetes cluster:

helm install casdoor oci://registry-1.docker.io/casbin/casdoor-helm-charts

After installation, access Casdoor through your cluster service/ingress. The official guide covers chart versions (including optional --version) and cluster-specific settings.

Official guide: Try with Helm

---

<a id="features"></a>

✨ Features

<table> <tr> <td width="50%">

🔐 Authentication

• OAuth 2.0 / OIDC — OpenID Connect and OAuth 2.x authorization
• SAML 2.0 — Enterprise SSO integration
• CAS — Central Authentication Service
• LDAP — Directory service integration
• WebAuthn / Passkeys — Passwordless authentication
• TOTP / MFA — Multi-factor authentication
• Face ID — Biometric authentication

</td> <td width="50%">

🏢 Enterprise

• SCIM 2.0 — User provisioning
• RBAC — Role-based access control
• Social Login — Google, GitHub, Azure AD, and more
• Custom providers — Extensible identity providers
• User management — Web UI for administration
• Audit logs — Comprehensive logging
• Multi-tenancy — Organization support

</td> </tr> <tr> <td width="50%">

🤖 AI & MCP

• MCP Gateway — Model Context Protocol support
• A2A Protocol — Agent-to-Agent communication
• AI-First Design — Built for AI applications

</td> <td width="50%">

🛠️ Developer Experience

• RESTful API — Complete API coverage
• SDKs — Go, Java, Python, Node.js, and more
• Swagger UI — Interactive API documentation
• Webhooks — Event-driven integrations
• Customizable UI — Brand theming support

</td> </tr> </table>

---

<a id="technology-stack"></a>

Technology stack

Casdoor is built as a frontend–backend separated project:

• Web UI: JavaScript and React (web/)
• API server: Go with Beego, RESTful APIs (repository root)
• Data: mainstream databases including MySQL, PostgreSQL, and others (overview)
• Cache: optional Redis for session/cache-style deployments (configure as needed)

---

<a id="documentation"></a>

📖 Documentation

All product documentation, installation, and tutorials live at casdoor.ai/docs/overview. Start here, then use the sections below.

Install

• Install from source
• Install with Docker
• Install with Kubernetes Helm

Connect applications

• How to connect to Casdoor

APIs

• Public API
• Swagger UI (live API explorer)

---

<a id="integrations"></a>

🔌 Integrations

Casdoor integrates with common languages and frameworks:

<p align="center"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/go/go-original.svg" width="40" alt="Go"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/java/java-original.svg" width="40" alt="Java"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/python/python-original.svg" width="40" alt="Python"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/nodejs/nodejs-original.svg" width="40" alt="Node.js"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/react/react-original.svg" width="40" alt="React"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/vuejs/vuejs-original.svg" width="40" alt="Vue"> <img src="https://cdn.jsdelivr.net/gh/devicons/devicon/icons/angularjs/angularjs-original.svg" width="40" alt="Angular"> </p>

Browse the full list: Integrations.

---

<a id="community-and-support"></a>

🤝 Community and support

• Discord: Join our community
• Contact: casdoor.ai/help
• Issues: GitHub Issues
• Discussions: GitHub Discussions

---

<a id="contributing"></a>

🌍 Contributing

If you have questions about Casdoor, you can open an issue. Pull requests are welcome; we recommend opening an issue first so you can align with maintainers and the community before larger changes.

Please also read our contribution guidelines before contributing.

Translation and i18n

• Crowdin is used for translation workflows: casdoor-site on Crowdin.
• The web app uses i18next. When you add or change user-visible strings under web/, update the English catalog at web/src/locales/en/data.json accordingly.

---

<a id="donate"></a>

❤️ Donate

If you find Casdoor useful, please consider supporting its development:

<a href="https://opencollective.com/casdoor#sponsor"><img src="https://opencollective.com/casdoor/tiers/sponsor.svg?avatarHeight=74" alt="Sponsors on Open Collective"></a>

<a href="https://opencollective.com/casdoor#backer"><img src="https://opencollective.com/casdoor/tiers/backer.svg?avatarHeight=36" alt="Backers on Open Collective"></a>

---

<a id="license"></a>

📄 License

Casdoor is licensed under the Apache License 2.0.

---

<div align="center">

<a href="https://github.com/casdoor/casdoor/stargazers"><img src="https://img.shields.io/github/stars/casdoor/casdoor?style=social&logo=github&label=Star" alt="GitHub Stars"></a>

_{© 2026 <a href="https://casdoor.ai">Casdoor</a>. Licensed under <a href="https://github.com/casdoor/casdoor/blob/master/LICENSE">Apache License 2.0</a>.}

</div>