NewCasdoor for AI agents: OAuth for MCP servers, Token Exchange and DPoP

Integrations

Single sign-on for the apps you run

Step-by-step guides to signing in to self-hosted apps with Casdoor over OpenID Connect: what to set in Casdoor, what to set in the app, and how to map groups to roles.

DevOps & infrastructure

Grafana

Set up Grafana single sign-on with Casdoor over OpenID Connect: Generic OAuth settings, PKCE, and Grafana roles mapped from Casdoor groups.

GitLab

Configure self-managed GitLab to sign users in with Casdoor over OpenID Connect: gitlab.rb provider settings, account creation and group-based admins.

Argo CD

Connect Argo CD to Casdoor over OpenID Connect: oidc.config in argocd-cm, the client secret, PKCE, CLI login and RBAC from Casdoor groups.

Portainer

Set up Portainer single sign-on with Casdoor using Portainer's custom OAuth provider: endpoints, user identifier, scopes and automatic user creation.

Gitea

Add Casdoor to Gitea as an OpenID Connect authentication source: the add-oauth command, callback URL, and admins from a Casdoor group.

Proxmox VE

Add Casdoor to Proxmox VE as an OpenID Connect realm: the pveum command, redirect URL, usernames, groups and permissions.

Productivity

Nextcloud

Set up Nextcloud single sign-on with Casdoor using the OpenID Connect user backend (user_oidc): provider command, user ID and group mapping.

Vaultwarden

Turn on Vaultwarden single sign-on with Casdoor over OpenID Connect: the SSO_* settings, the redirect URI, and the email verification check.

Immich

Let people sign in to Immich with Casdoor: OAuth settings in the Immich admin, the web and mobile redirect URIs, and storage label mapping.

AI

Open WebUI

Set up Open WebUI single sign-on with Casdoor over OpenID Connect: OAuth environment variables, sign-up, and group sync from Casdoor groups.

Using something else? Any app that supports OpenID Connect, OAuth 2.0, SAML, CAS or LDAP can sign in with Casdoor. The Casdoor documentation covers dozens more, from Jenkins and Jira to Kubernetes and APISIX.

Ready to secure your next big move?

Put login, single sign-on, MFA, permissions and AI agent access behind one open-source platform, hosted by us or run by you.

Try Casdoor Cloud free

A dedicated instance in the region you choose, from $24.17/month billed yearly with no per-user fees.

Free trial

Self-host for free

Run the same Apache-2.0 Casdoor on your own servers with Docker or Kubernetes.

Read the docs

Talk to an expert

Plan a migration, an on-premises rollout or an authorization model with our team.

Contact sales