Casdoor

Casdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication server with a web UI. Built in Go (Beego) with a React frontend, Casdoor supports OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, Kerberos/SPNEGO, WebAuthn / Passkeys, TOTP / MFA, SCIM 2.0 provisioning, social login, multi-tenant organizations, role-based access control, and an MCP Gateway plus A2A Protocol for agent-to-agent communication. The platform exposes a RESTful API documented via Swagger and ships SDKs for Go, Java, Python, Node.js, C#, C++, PHP, Ruby, JavaScript, Lua, and Haskell. Released under the Apache License 2.0.

8 APIs 22 Features

AuthenticationAuthorizationIAMIdentityLDAPMCPMFAOAuthOIDCOpen SourcePasskeysSAMLSCIMSingle Sign-OnSSOWebAuthn

SAML 2.0 IdP

CAS Server

LDAP Server

SCIM 2.0 Provisioning

WebAuthn / Passkeys

TOTP MFA

Face ID Biometrics

Social Login

RBAC

ABAC

ACL

Multi-Tenancy

Organizations

Audit Logs

Webhooks

Identity Provider Federation

MCP Gateway

A2A Protocol

Self-Hosted

Apache 2.0 License

Use Cases

Single Sign-On

Customer Identity (CIAM)

Workforce Identity

Passwordless Login

Multi-Factor Authentication

Enterprise SSO via SAML

API Authorization

Identity Provider for AI Agents

User Provisioning Automation

Self-Hosted Auth Server

Integrations

GitHub

Google

Azure AD

WeChat

MySQL

PostgreSQL

SQL Server

Redis

Beego

React

Casbin

Resources

GitHubOrganization

Sources

opencollection: 1.0.0
info:
  name: Casdoor REST API
  version: 1.503.0
request:
  auth:
    type: bearer
    token: '{{bearerToken}}'
items:
- info:
    name: OIDC
    type: folder
  items:
  - info:
      name: OIDC discovery document
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/.well-known/openid-configuration
    docs: OIDC discovery document
  - info:
      name: JSON Web Key Set
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/.well-known/jwks
    docs: JSON Web Key Set
  - info:
      name: WebFinger user lookup
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/.well-known/webfinger
      params:
      - name: resource
        value: ''
        type: query
    docs: WebFinger user lookup
- info:
    name: Authentication
    type: folder
  items:
  - info:
      name: Login a user
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/login
      body:
        type: json
        data: '{}'
    docs: Login a user
  - info:
      name: Sign up a new user
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/signup
      body:
        type: json
        data: '{}'
    docs: Sign up a new user
  - info:
      name: Log out the current user
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/logout
    docs: Log out the current user
  - info:
      name: OAuth 2.0 device authorization
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/device-auth
    docs: OAuth 2.0 device authorization
- info:
    name: Users
    type: folder
  items:
  - info:
      name: List users in an organization
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-users
      params:
      - name: owner
        value: ''
        type: query
        description: Organization name
    docs: List users in an organization
  - info:
      name: List all users across organizations
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-global-users
    docs: List all users across organizations
  - info:
      name: Get a single user
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-user
      params:
      - name: id
        value: ''
        type: query
        description: Composite id in form owner/name
    docs: Get a single user
  - info:
      name: Create a user
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/add-user
      body:
        type: json
        data: '{}'
    docs: Create a user
  - info:
      name: Update a user
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/update-user
      params:
      - name: id
        value: ''
        type: query
      body:
        type: json
        data: '{}'
    docs: Update a user
  - info:
      name: Delete a user
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/delete-user
      body:
        type: json
        data: '{}'
    docs: Delete a user
  - info:
      name: Validate a user password
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/check-user-password
      body:
        type: json
        data: '{}'
    docs: Validate a user password
- info:
    name: Organizations
    type: folder
  items:
  - info:
      name: List organizations
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-organizations
      params:
      - name: owner
        value: ''
        type: query
    docs: List organizations
  - info:
      name: Create an organization
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/add-organization
      body:
        type: json
        data: '{}'
    docs: Create an organization
- info:
    name: Applications
    type: folder
  items:
  - info:
      name: List applications
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-applications
      params:
      - name: owner
        value: ''
        type: query
    docs: List applications
  - info:
      name: Get an application
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-application
      params:
      - name: id
        value: ''
        type: query
    docs: Get an application
  - info:
      name: Create an application
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/add-application
      body:
        type: json
        data: '{}'
    docs: Create an application
- info:
    name: Roles
    type: folder
  items:
  - info:
      name: List roles
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-roles
      params:
      - name: owner
        value: ''
        type: query
    docs: List roles
  - info:
      name: Create a role
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/add-role
      body:
        type: json
        data: '{}'
    docs: Create a role
- info:
    name: Permissions
    type: folder
  items:
  - info:
      name: Casbin enforcement check
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/enforce
      body:
        type: json
        data: '{}'
    docs: Casbin enforcement check
  - info:
      name: Batch Casbin enforcement
      type: http
    http:
      method: POST
      url: https://door.casdoor.com/api/batch-enforce
      body:
        type: json
        data: '{}'
    docs: Batch Casbin enforcement
  - info:
      name: List permissions
      type: http
    http:
      method: GET
      url: https://door.casdoor.com/api/get-permissions
      params:
      - name: owner
        value: ''
        type: query
    docs: List permissions
bundled: true

Casdoor

APIs

Casdoor REST API

Casdoor OAuth 2.0 / OIDC Provider

Casdoor SAML 2.0 Identity Provider

Casdoor CAS Server

Casdoor LDAP Server

Casdoor SCIM 2.0 API

Casdoor MCP Gateway

Casdoor Webhooks

Collections

Casdoor REST API

Pricing Plans

Casdoor Plans Pricing

Rate Limits

Casdoor Rate Limits

FinOps

Casdoor Finops

Features

Use Cases

Integrations

Resources

Sources