Casdoor vs SuperTokens

Single sign-on for all your apps, not just one

SuperTokens gives you login building blocks to embed in your own frontend and backend, with MFA and account linking as paid features. Casdoor is a central identity provider that many apps share, with MFA, SSO and authorization included.

Casdoor and SuperTokens at a glance

CasdoorSuperTokens
Source codeOpen source (Apache-2.0)Open source (Apache-2.0), with enterprise features under a separate license
Where it runsCasdoor Cloud, or your own servers with Docker or KubernetesSuperTokens' managed service, or self-hosted
PricingFrom $24.17/month billed yearly per dedicated instance, with no per-user fees; self-hosting is freeManaged: free to 5,000 MAU, then $0.02 per MAU; MFA and account linking are paid features
ModelA central identity provider shared by all your appsAuth embedded in your app through frontend and backend SDKs

Information about SuperTokens is from its public website as of October 2026 (SuperTokens core license, SuperTokens pricing) and may have changed. SuperTokens is a trademark of its owner.

Why teams choose Casdoor

SSO across apps

Users sign in once and reach every app you connect, over OIDC, SAML or CAS.

MFA included

TOTP, SMS, email and passkeys are in every Casdoor plan and in the free self-hosted edition.

No MAU bill

Cloud plans are a flat monthly price, so more users don't mean a bigger invoice.

Authorization included

Casbin RBAC, ABAC and ACL are built in, instead of being left to your code.

When SuperTokens may fit better

  • You have one app and want login rendered and controlled entirely inside it.
  • You want auth logic to run in your own backend through SDK overrides.

Moving from SuperTokens to Casdoor

Export users from SuperTokens and import them into Casdoor. Casdoor can verify bcrypt, Argon2id, PBKDF2 and salted SHA-256 / SHA-512 password hashes, so imported users can keep their passwords. Then switch your app to Casdoor's OIDC endpoints or SDK.

Plan a migration with us

FAQ

Frequently asked questions

Can I still keep login inside my app?
Yes. Casdoor's SDKs can open sign-in in a popup or call its API directly, and the hosted pages can be themed and served from your own domain so they look like part of your app.
How does Casdoor's pricing compare with SuperTokens'?
SuperTokens' managed service charges $0.02 per MAU after 5,000, with MFA and account linking billed separately. Casdoor Cloud is from $24.17/month billed yearly for a dedicated instance with MFA included.