Casdoor vs Ory
A complete open-source IAM, not a kit of parts
Ory is a set of headless open-source services (Kratos, Hydra, Keto and Oathkeeper) that you combine and put your own UI on. Casdoor is a single service with sign-in pages, an admin console, OAuth and OIDC, SAML and Casbin authorization built in.
Casdoor and Ory at a glance
| Casdoor | Ory | |
|---|---|---|
| Source code | Open source (Apache-2.0) | Open source (Apache-2.0) |
| Architecture | One service with hosted login pages, admin console and API | Separate headless services for identity, OAuth 2.0, permissions and proxying; you build the UI |
| Where it runs | Casdoor Cloud, or your own servers with Docker or Kubernetes | Ory Network, or self-hosted |
| Pricing | From $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is free | Ory Network production plans from $770 per year |
Information about Ory is from its public website as of October 2026 (Ory Kratos on GitHub, Ory Hydra on GitHub, Ory pricing) and may have changed. Ory is a trademark of its owner.
Why teams choose Casdoor
Working in an afternoon
Casdoor ships sign-up, login, MFA and account pages, so you don't build and maintain every screen.
One service to run
A single Go binary and a SQL database, instead of several services to deploy, wire together and upgrade.
One IdP for every app
Casdoor is an identity provider over OIDC, SAML, CAS, LDAP and RADIUS, so the same accounts sign in to your own apps, SaaS tools and devices.
Don't want to run it?
Casdoor Cloud gives you a dedicated instance and database from $24.17/month billed yearly, upgraded by the team that builds Casdoor.
When Ory may fit better
- You want full control of every screen and are happy to build the UI yourself.
- You need only an OAuth 2.0 and OpenID Connect server, such as Ory Hydra, without user management.
Moving from Ory to Casdoor
Export identities with Ory's API and import them into Casdoor. Casdoor can verify bcrypt, Argon2id, PBKDF2 and salted SHA-256 / SHA-512 password hashes, so imported users can keep their passwords. OAuth 2.0 and OIDC clients only need a new issuer URL and client credentials.
Plan a migration with usFAQ
Frequently asked questions
Does Casdoor have an API for custom UIs?
How does Casdoor's authorization compare with Ory Keto?
Compare
How Casdoor compares
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales