Casdoor vs Supabase Auth
A standalone identity provider, not just app auth
Supabase Auth is the authentication part of the Supabase Postgres platform and works hand in hand with its row-level security. Casdoor is a standalone identity provider: one place where users sign in to all your apps, whatever database they use.
Casdoor and Supabase Auth at a glance
| Casdoor | Supabase Auth | |
|---|---|---|
| Source code | Open source (Apache-2.0) | Open source (MIT) |
| Where it runs | Casdoor Cloud, or your own servers with Docker or Kubernetes | Supabase's cloud as part of a Supabase project, or self-hosted with the Supabase stack |
| Pricing | From $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is free | Free plan includes 50,000 MAU; Pro is $25 per month with 100,000 MAU, then $0.00325 per MAU |
| Built around | Any app and any database, over standard protocols | Your Supabase Postgres database and its row-level security policies |
Information about Supabase Auth is from its public website as of October 2026 (Supabase pricing, Supabase Auth on GitHub) and may have changed. Supabase Auth is a trademark of its owner.
Why teams choose Casdoor
One IdP for every app
Casdoor is an identity provider over OIDC, SAML, CAS, LDAP and RADIUS, so the same accounts sign in to your own apps, SaaS tools and devices.
An admin console for people
Manage users, organizations, groups, roles and identity providers in Casdoor's console, without writing SQL.
Authorization included
Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.
Ready for AI agents
Casdoor can be the OAuth authorization server for your MCP servers, with tokens scoped to the tools a user allowed.
When Supabase Auth may fit better
- Your app is built on Supabase and you want auth to live in the same project as your database.
- You only need login for a single app.
Moving from Supabase Auth to Casdoor
Casdoor's database syncer can copy users from a Postgres table, such as the auth.users table of a Supabase project. Supabase Auth stores bcrypt password hashes, and casdoor can verify bcrypt, Argon2id, PBKDF2 and salted SHA-256 / SHA-512 password hashes, so imported users can keep their passwords.
Plan a migration with usFAQ
Frequently asked questions
Can I keep using Supabase for my data?
Is Casdoor open source like Supabase Auth?
Compare
How Casdoor compares
Ready to secure your next big move?
Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.
Try Casdoor Cloud free
A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.
Free trialSelf-host for free
Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.
Read the docsTalk to an expert
Plan a migration, an on-premises rollout or an authorization model with our team.
Contact sales