📄️ Overview
Choose how your application signs users in with Casdoor - OAuth 2.0 and OpenID Connect, SAML, or CAS - and whether to use an OIDC library, a Casdoor SDK, or a plugin.
📄️ Standard OIDC client
Point any OpenID Connect client library at the Casdoor discovery endpoint, and learn what the discovery document and the UserInfo endpoint return.
📄️ Casdoor SDKs
Find the Casdoor SDK for your platform, and use a frontend SDK and a backend SDK together to sign users in, verify the access token, and call the Casdoor API.
📄️ Single sign-on (SSO)
Let users sign in once and open every application of their organization without signing in again.
📄️ Single sign-out
Sign a user out of every application of the organization at once with the SSO logout endpoint, and notify your applications so that they end their own sessions.
📄️ RP-initiated logout
Reference for the OpenID Connect end-session endpoint of Casdoor, which a client application calls to sign the user out of Casdoor.
📄️ Vue SDK
Add Casdoor sign-in to a Vue 2 or Vue 3 application with casdoor-vue-sdk.
🗃️ Desktop SDKs
4 items
🗃️ Mobile SDKs
1 item
📄️ Casdoor CLI
Install the Casdoor CLI, connect it to your Casdoor instance, and manage users and groups from the terminal.
📄️ Plugins and middleware
Official Casdoor plugins and middleware for Spring Boot, Quarkus, WordPress, Odoo, Django, Kibana, Chrome, and Terraform.
📄️ Chrome extension
Add Casdoor sign-in to a Chrome extension with the Chrome identity API and the OAuth 2.0 authorization code flow.
📄️ Next.js
Add Casdoor sign-in to a Next.js application with casdoor-js-sdk, and protect routes with Next.js middleware.
📄️ Nuxt
Add Casdoor sign-in to a Nuxt application with casdoor-js-sdk, and protect routes with Nuxt middleware.
📄️ OAuth 2.0
Reference for the OAuth 2.0 endpoints of Casdoor - every supported grant type, PKCE, resource indicators, DPoP, token introspection, and the UserInfo endpoint.
📄️ Guest authentication
Create temporary users without a username or password, and turn them into regular users later.
📄️ Kerberos/SPNEGO
Configure Kerberos/SPNEGO (Integrated Windows Authentication), so that users on domain-joined machines sign in to Casdoor without entering credentials.
📄️ CAS
Use Casdoor as a Central Authentication Service (CAS) server for CAS 1.0, 2.0, and 3.0 clients.
🗃️ SAML
6 items
🗃️ MCP server
10 items
📄️ Face ID
Let users register their face in their Casdoor account and sign in by scanning it on the sign-in page.
📄️ WebAuthn
Let users sign in to Casdoor with passkeys, fingerprint or face recognition, Windows Hello, or a security key through WebAuthn.