← Directory

casdoor

Casdoor is an open-source, multi-tenant, and cloud-native identity and access management (IAM) solution.

  • Productivity
  • Security
Casdoor is an open-source, multi-tenant, and cloud-native identity and access management (IAM) solution. It provides a user-friendly interface for managing user authentication and authorization in various applications and systems Create a app.conf file in the same appdata/casdoor directory, then copy app.conf from https://github.com/casdoor/casdoor/blob/master/conf/app.conf and edit accordingly default login: admin 123

Platform availability

Available on 2 of 6 install platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm

Also on Docker Hub and GitHub

Health score

85/100 Excellent

Maintained
100last commit 2 days ago
Popular
8314,521 GitHub stars
Easy to install
452 install platforms, install notes, Docker image
Light to run
100100 MB minimum RAM, runs on ARM
How is this calculated?

A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). Factors without data are left out and the rest are rescaled.

Availability: platform listings confirmed today, links checked 9 days ago

GitHub stars
14,521
Open issues
95
Last commit
2026-10-07
Latest release
v4.18.0
License
Apache-2.0
Activity
rising

Checked 2 days ago - source: GitHub (casdoor/casdoor)

Resources & Compatibility

Minimum requirements: 100 MB RAM. ARM (e.g. Raspberry Pi) is supported.

Checked 10 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Install on Kubernetes with Helm If your home lab uses Kubernetes, run the Helm install command from the README so it pulls the official Casdoor chart. This sets up the deployment for you instead of relying on manually copied parts that can be missed. source
  • Create an application for each app Before connecting a website or mobile app, create a matching Casdoor application and enter its exact redirect/callback URL. If that URL does not match what the app sends back, sign-in will fail or be blocked. source
  • Enable MFA on the admin account Use TOTP (a one-time code app) or WebAuthn (security key/fingerprint) to add a second sign-in check. This matters because the admin account can create users and applications, so password-only access is risky. source

Fetched 10 days ago - each note links to its source

Alternatives (7)

  • Auth0 - You can connect any application (written in any language or on any stack) to Auth0 and define its Connection, the method used to authentica…
  • Authelia - Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for…
  • Keycloak - Keycloak is an open-source Identity and Access Management platform for adding authentication to self-hosted applications.
  • Tinyauth - Tinyauth is a lightweight OpenID Connect authentication and authorization server that adds login and access controls to self-hosted apps be…
  • VoidAuth - VoidAuth is an open-source authentication platform for self-hosted applications.
  • ZITADEL - Zitadel is an open-source identity and access management platform for self-hosted services, teams, and customers.
  • authentik - Authentik is an open-source identity provider that adds flexible single sign-on, user management, and common sign-in protocol support to se…

Checked 7 days ago - source: AlternativeTo

Common questions

How should I deploy Casdoor on Kubernetes in a home lab?

Run the Helm install command from the README so it pulls the official Casdoor chart. That sets up the deployment instead of relying on manually copied parts that can be missed.

Why does sign-in fail after I connect a website or mobile app?

Create a matching Casdoor application and enter its exact redirect/callback URL. If that URL does not match what the app sends back, sign-in will fail or be blocked.

How can I protect the Casdoor admin account from password-only access?

Enable MFA on the admin account using TOTP or WebAuthn. This matters because the admin account can create users and applications, so password-only access is risky.

Which authentication standards and sign-in methods does Casdoor support?

Casdoor supports OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, and MFA. It also supports more than 100 identity providers.

Where can I find guides for deploying behind Nginx and migrating databases?

The Casdoor documentation includes a section for deploying behind Nginx. It also includes a database migration guide.

Answers sourced from casdoor.org, casdoor.org, github.com, github.com, github.com

Community

Collected 9 days ago - public community threads