Frontdoor
Open-source · Self-hosted

One door.
Every tool.

Give your team one secure, searchable place for every internal app — with Microsoft sign-in and access that stays under your control.

Watch it in action 3:40 Explore features
✓ Microsoft Entra SSO ✓ Docker-ready ✓ Your data, your infrastructure
Frontdoor running in the Meridian Works demo workspace, with a searchable catalog of business applications Take a look inside
✓ Real product. Demo workspace.
16 apps. One starting point.
The three-minute tour

Meet your team's
new starting point.

From finding the right app to keeping access under control. See the real product, in English or Italian.

FRONTDOOR / IN ACTION

Real software, fictional workspace. AI-generated narration. Public release in preparation; the code repository is not yet public.

Read the transcript ↗EN video ↗Video IT ↗

The problem

Your intranet should not be a graveyard of links.

Tools multiply. URLs change. Permissions drift. People lose time asking where things live — and IT keeps maintaining bookmarks nobody trusts.

Frontdoor turns that sprawl into a launchpad people actually use.

Before
  • Scattered bookmarks
  • Repeated sign-ins
  • Stale access lists
With Frontdoor
  • One searchable catalog
  • One Microsoft identity
  • Access by team and role
What you get

Simple for people.
Powerful for IT.

A focused experience for the whole organization, backed by the controls administrators need.

⌕
01

A catalog that stays useful

Search, tags, favorites, card and compact views. Every user sees the apps they can actually access — nothing else.

Search applications⌕
★ Favorites ⌘ Group by tag
◎
02

Microsoft sign-in

Authenticate through Microsoft Entra ID and provision people automatically on first login.

⌘
03

Access by group

Map apps to local or Entra groups, including inherited group membership.

↗
04

Connect any app

Launch plain links, forward signed SSO tokens, share a secure cookie, or open native Entra apps.

◫
05

Admin without config files

Manage apps, people, groups, branding, logs and backups from one clean interface.

◉
06

Built to be yours

Customize the experience, choose what to log, export a complete backup, and keep the service on infrastructure you control.

✓ Custom branding✓ Configurable retention✓ Portable backups✓ English & Italian UI
A closer look

One door.
Look at what opens.

Less searching for people.
More clarity for IT.
Explore six moments from the product.

INSIDE / FRONTDOOR
The Frontdoor demo catalog, showing tagged business applications and favorites
01 / 06

The whole workspace. Minus the noise.

One searchable home for the tools your team uses. Tags, favorites and clear descriptions turn a list of links into a useful starting point.

View full-size image ↗
The administration console listing applications, status and access modes
03 / 06

Keep the catalog useful. Keep IT in control.

Manage applications, visibility and destinations in one place. An explicit configuration replaces scattered bookmarks and stale spreadsheets.

View full-size image ↗
Comparison of an IT owner with sixteen applications and a user with seven assigned applications
04 / 06

Same door. Different possibilities.

In our demo, the IT owner sees sixteen apps; a team member sees seven. Group assignments make the catalog relevant to the person signing in.

View full-size image ↗
Diagram showing Frontdoor integration options including direct links, SSO, shared sessions and Microsoft Entra
05 / 06

Your stack doesn't need to start over.

Direct links, signed SSO, shared sessions or Microsoft Entra: pick the connection that fits each application.

View full-size image ↗
The Frontdoor audit trail recording administrative changes and their context
06 / 06

Changes leave a trail.

See how the configuration evolves, with a dedicated audit view for administrative actions. Visibility doesn't stop at the sign-in screen.

View full-size image ↗

Captured in our demo workspace · Select an image to see it in full detail.

From zero to useful

Deploy once.
Open every day.

Frontdoor is designed to fit an existing stack instead of forcing a new one.

  1. 01

    Run the container

    Deploy the Docker image on your server or cloud platform with persistent storage.

  2. 02

    Connect Microsoft

    Add your Entra application credentials and choose the owners of the workspace.

  3. 03

    Add your apps

    Import or create apps, assign groups, and pick the connection mode that fits each tool.

  4. 04

    Share one URL

    Your team signs in and gets a personal, permission-aware app catalog.

frontdoor — deploy
$ docker compose up -d

✓ frontdoor  Started
✓ database   Ready
✓ gateway    Listening on :3001
Security by design

Your front door should be a strong one.

Frontdoor keeps identity at Microsoft, sessions away from browser scripts, and authorization close to the apps it protects.

01

Secure sessions

Signed JWTs are stored in httpOnly cookies, never exposed to frontend JavaScript.

02

Traceable changes

Privileged actions have a dedicated audit trail with configurable retention.

03

Defensive defaults

Parameterized queries, sanitized SVG content, CSRF state validation and rate limits are built in.

04

Self-hosted control

Your catalog, database and operational data stay in the environment you choose.

Coming soon

Less hunting.
More opening.

The public open-source release is in preparation. Follow BuildBandits on GitHub to see Frontdoor as it opens up.

Follow the project