casdoor

Why we included this project

Casdoor began as a conventional single sign-on and identity server, and the current release still does that job. What changed is that it now also acts as an AI-first control point in front of both regular applications and AI agents. On top of the usual enterprise protocol coverage (OAuth 2.0, OIDC, SAML, LDAP, SCIM, WebAuthn), it adds a Model Context Protocol (MCP) gateway and an A2A layer, so the console you already use to manage users and organizations can also handle authentication and access control for LLM agent traffic. That is the main draw for teams wiring agent workflows into existing apps who would rather not maintain a second authorization stack. It ships with a React-based admin UI, a Go API server, a REST API, SDKs for several languages, and Docker and Helm deployments, so self-hosting and fitting it into a real infrastructure pipeline is practical. If you want one self-hosted place to enforce who and what may call your models and your services, Casdoor is worth comparing against the dedicated gateways.