Casdoor vs Firebase Auth
An open-source alternative to Firebase Authentication
Firebase Authentication is Google's sign-in service for Firebase apps; SAML, OIDC, MFA and multi-tenancy come with the paid Identity Platform upgrade. Casdoor is an open-source identity platform with all of those included, self-hosted for free or run for you at a flat price.
Casdoor and Firebase Auth at a glance
| Casdoor | Firebase Auth | |
|---|---|---|
| Source code | Open source (Apache-2.0) | Proprietary |
| Where it runs | Casdoor Cloud, or your own servers with Docker or Kubernetes | Google Cloud |
| Pricing | From $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is free | With Identity Platform, the first 50,000 MAU and 50 SAML / OIDC MAU are free, then billed at Google Cloud rates; SMS is billed per message |
| SAML, OIDC, MFA, multi-tenancy | Included | Require upgrading to Firebase Authentication with Identity Platform |
Information about Firebase Auth is from its public website as of October 2026 (Firebase pricing, Firebase Authentication and Identity Platform) and may have changed. Firebase Auth is a trademark of its owner.
Why teams choose Casdoor
One IdP for every app
Casdoor is an identity provider over OIDC, SAML, CAS, LDAP and RADIUS, so the same accounts sign in to your own apps, SaaS tools and devices.
No MAU bill
Cloud plans are a flat monthly price, so more users don't mean a bigger invoice.
Run it anywhere
The same Apache-2.0 code runs in our cloud or on your servers, and you can move between them.
Authorization included
Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.
When Firebase Auth may fit better
- Your app is built on Firebase and relies on Firestore security rules and Cloud Functions triggers tied to Firebase users.
- You need a vendor with SOC 2 or ISO 27001 reports for the hosted service today. Casdoor Cloud does not have them yet; teams with that requirement usually self-host Casdoor in their own certified environment.
Moving from Firebase Auth to Casdoor
Export your users with the Firebase CLI (`firebase auth:export`) and import them into Casdoor. Firebase hashes passwords with its own modified scrypt, which Casdoor does not verify today, so plan for a password reset or passwordless sign-in on first login. Apps then switch to Casdoor's OIDC endpoints.
Plan a migration with usFAQ
Frequently asked questions
Can I use Casdoor with a Firebase app?
How does Casdoor's pricing compare with Firebase's?
Compare
How Casdoor compares
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales