Casdoor vs Entra External ID
An open-source alternative to Entra External ID and Azure AD B2C
Microsoft Entra External ID is Microsoft's customer identity service, and Azure AD B2C is no longer sold to new customers. Casdoor is an open-source identity platform that you can self-host or run as a dedicated instance in the region you choose.
Casdoor and Entra External ID at a glance
| Casdoor | Entra External ID | |
|---|---|---|
| Source code | Open source (Apache-2.0) | Proprietary |
| Where it runs | Casdoor Cloud, or your own servers with Docker or Kubernetes | Microsoft's cloud, linked to an Azure subscription |
| Pricing | From $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is free | First 50,000 MAU free, then per MAU; SMS, machine-to-machine, Go-Local and ID Governance are add-ons |
| Data location | Your own servers, or any of 23 Casdoor Cloud regions | The Go-Local add-on keeps data in Australia or Japan |
Information about Entra External ID is from its public website as of October 2026 (Entra External ID pricing, External ID billing model, Azure AD B2C end of sale) and may have changed. Entra External ID is a trademark of its owner.
Why teams choose Casdoor
No MAU bill
Cloud plans are a flat monthly price, so more users don't mean a bigger invoice.
Choose your region
Put your Casdoor Cloud instance in any of 23 regions, or self-host it where your data has to stay.
Run it anywhere
The same Apache-2.0 code runs in our cloud or on your servers, and you can move between them.
Authorization included
Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.
When Entra External ID may fit better
- You run on Microsoft 365 and Azure and want guest collaboration in your workforce tenant.
- You need Microsoft as your vendor for compliance or procurement.
Moving from Entra External ID to Casdoor
Read users with Microsoft Graph and import them into Casdoor, and plan how users will set a password in Casdoor, such as a reset email or passwordless sign-in on first login. Apps that use OpenID Connect or SAML only need a new issuer URL and client credentials. Casdoor also keeps Microsoft accounts and Entra ID as sign-in options.
Plan a migration with usFAQ
Frequently asked questions
Azure AD B2C is no longer sold. Is Casdoor a replacement?
Can users still sign in with Microsoft accounts?
Compare
How Casdoor compares
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales