# Casdoor Casdoor is an open-source, self-hosted identity and access management platform that centralizes single sign-on, authentication, and authorization across multiple applications and organizations. It is open source and self-hosted, installable on Docker Hub and Unraid. Canonical page: https://ourlocalhost.com/app/814/casdoor ## Description Casdoor is an open-source, self-hosted identity and access management platform that centralizes single sign-on, authentication, and authorization across multiple applications and organizations. ## Platform availability Available on 2 of 9 platforms: Unraid, Helm. ## Health score 74/100 (Good), based on 5 of 5 factors. - Maintained: 100 (last commit 15 days ago) - Popular: 83 (14,521 GitHub stars) - Easy to install: 45 (2 install platforms, install notes, Docker image) - Light to run: 100 (100 MB minimum RAM, runs on ARM) - Security check: 20 (1 serious finding, 9 minor, CI, tests) ## Security check 1 serious finding: A private key is committed in the source code. Automated checks on commit 2e1127c, 14 Oct 2026. Not an audit. ## Links - Docker Hub: https://hub.docker.com/r/casbin/casdoor - Official website: https://casdoor.org/ - Unraid: https://ca.unraid.net/apps/casdoor-012fcdr1jvp88z?q=casdoor - GitHub: https://github.com/casdoor/casdoor - Documentation: https://casdoor.org/docs/overview/ ## Common questions ### How should I deploy Casdoor on Kubernetes in a home lab? Run the Helm install command from the README so it pulls the official Casdoor chart. That sets up the deployment instead of relying on manually copied parts that can be missed. ### Why does sign-in fail after I connect a website or mobile app? Create a matching Casdoor application and enter its exact redirect/callback URL. If that URL does not match what the app sends back, sign-in will fail or be blocked. ### How can I protect the Casdoor admin account from password-only access? Enable MFA on the admin account using TOTP or WebAuthn. This matters because the admin account can create users and applications, so password-only access is risky. ### Which authentication standards and sign-in methods does Casdoor support? Casdoor supports OAuth 2.0, OIDC, SAML, CAS, LDAP, WebAuthn, and MFA. It also supports more than 100 identity providers. ### Where can I find guides for deploying behind Nginx and migrating databases? The Casdoor documentation includes a section for deploying behind Nginx. It also includes a database migration guide. ## Alternatives - Authelia: Authelia is an open-source authentication and authorization server that provides login, multi-factor authentication, and single sign-on for… - Keycloak: Keycloak is an open-source Identity and Access Management platform for adding authentication to self-hosted applications. - Tinyauth: Tinyauth is a lightweight OpenID Connect authentication and authorization server that adds login and access controls to self-hosted apps be… - authentik: Authentik is an open-source identity provider that adds flexible single sign-on, user management, and common sign-in protocol support to se… --- Source: Our Local Host (https://ourlocalhost.com/app/814/casdoor), the self-hosted and open-source app directory.