Casdoor vs Amazon Cognito
An open-source alternative to Amazon Cognito
Amazon Cognito is AWS's user directory and sign-in service, priced per monthly active user with separate rates for federated users. Casdoor is an open-source identity platform that runs on any cloud or your own servers, or as a dedicated instance we manage.
Casdoor and Amazon Cognito at a glance
| Casdoor | Amazon Cognito | |
|---|---|---|
| Source code | Open source (Apache-2.0) | Proprietary |
| Where it runs | Casdoor Cloud, or your own servers with Docker or Kubernetes | AWS only |
| Pricing | From $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is free | Lite and Essentials include 10,000 MAU free, then Essentials is $0.015 per MAU and Lite from $0.0055; Plus is $0.02 per MAU with no free tier |
| Enterprise (SAML / OIDC) users | Same flat price as everyone else | 50 federated MAU free, then $0.015 per MAU |
Information about Amazon Cognito is from its public website as of October 2026 (Amazon Cognito pricing) and may have changed. Amazon Cognito is a trademark of its owner.
Why teams choose Casdoor
Not tied to AWS
Run the same Casdoor on any cloud, on premises, or in Casdoor Cloud, and move when you want.
No MAU bill
Cloud plans are a flat monthly price, so more users don't mean a bigger invoice.
One IdP for every app
Casdoor is an identity provider over OIDC, SAML, CAS, LDAP and RADIUS, so the same accounts sign in to your own apps, SaaS tools and devices.
Authorization included
Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.
When Amazon Cognito may fit better
- Your whole stack is on AWS and you use Cognito identity pools to hand out AWS credentials.
- You need only basic login for a very large user base and want the lowest per-user rate.
Moving from Amazon Cognito to Casdoor
Export user profiles with the Cognito API and import them into Casdoor, and plan how users will set a password in Casdoor, such as a reset email or a passwordless sign-in on first login. Apps using the Cognito hosted UI or OIDC only need a new issuer URL and client credentials.
Plan a migration with usFAQ
Frequently asked questions
Can Casdoor run on AWS?
How does Casdoor's pricing compare with Cognito's?
Compare
How Casdoor compares
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales