Skip to main content

Overview

Casdoor allows for the use of other OAuth applications as a sign-in method.

Currently, Casdoor supports multiple OAuth application providers. The icons of these providers will be displayed on the login and signup pages once they have been added to Casdoor. The following are the providers that Casdoor supports:

ProviderLogoProviderLogoProviderLogoProviderLogo
ADFSAlipayAmazonApple
Auth0Azure ADAzure AD B2CBaidu
BilibiliBitbucketBoxCasdoor
Cloud FoundryDailymotionDeezerDigitalOcean
DingTalkDiscordTiktokDropbox
Eve OnlineFacebookFitbitGitea
GiteeGitHubGitLabGoogle
HerokuInfluxCloudInfoflowInstagram
IntercomKakaoLarkLastfm
LineLinkedInMailruMeetup
MicrosoftNaverNextcloudOkta
OneDriveOuraPatreonPayPal
QQSalesforceShopifySlack
SoundCloudSpotifySteamStrava
StripeTikTokTumblrTwitch
TwitterTypetalkUberVK
WeChatWeComWeiboWePay
XeroYahooYammerYandex
ZoomEmailSMSBattle.net

We will show you how to apply for a third-party service and add it to Casdoor.

Apply to become a developer​

Before this, there are some general concepts you need to understand.

  • RedirectUrl, Redirect address after authentication, fill in your application address, such as https://forum.casbin.com/
  • Scope, Permission granted to you by the user, such as basic profile, Email address and posts and others.
  • ClientId/AppId, ClientKey/AppSecret, This is the most important information, and it is what you need to get after you apply for a developer account. You can not share the key/secret with anyone.

Add an OAuth provider​

  1. Go to your Casdoor index page.
  2. Click on Providers in the top bar.
  3. Click on Add, and you will see a new provider added to the list at the top.
  4. Click on the new provider to make changes to it.
  5. In the Category section, select OAuth.
  6. Choose the specific OAuth provider that you require from the Type dropdown.
  7. Fill in the necessary information, such as Client ID and Client Secret.

User Field Mapping​

OAuth providers often return additional user information beyond the standard profile fields. Casdoor's User Mapping feature allows you to automatically populate user profile fields from OAuth claims returned by your identity provider. This is particularly useful when integrating with enterprise identity providers like Okta, Azure AD, or other custom OAuth services that provide rich user metadata.

Automatic Account Linking​

When users authenticate via OAuth, Casdoor automatically attempts to link accounts using multiple strategies: existing OAuth links, email/phone matching (if enabled), and case-insensitive username matching. This is particularly useful for enterprises with existing users who want to enable OAuth authentication without requiring manual account linking.

Application Setup​

  1. Click on Application in the top bar and select the desired application to edit.
  2. Click on the provider add button and choose the newly added provider.
  3. Modify the provider's permissions, such as enabling registration, login, and unbinding.
  4. You're all set!