Frontdoor

Security notice: Node2Shell (CVE-2026-111497) affects Node.js before 24.22.1. The Frontdoor 1.5.2 image already runs a patched Node.js. Running from source, or from an image built before 21 October 2026? Update Node.js or pull the latest image. How to upgrade

Your apps, one clear way in.

One door.
Every tool.

A secure, searchable home for every internal app — Microsoft sign-in, access by group, on infrastructure you control.

Watch it in actionReal product, demo workspace · EN 3:40 · IT 4:06 Demo Microsoft sign-in Entra ID, with people provisioned on first login. Sign-in Access by group Local or Entra groups decide who sees what. Access Connect any app Plain links, signed SSO, shared sessions or Entra apps. Connect Documentation 18 guides for users, admins, operators and integrators. Docs
The product tour

Meet your team's
new starting point.

From finding the right app to keeping access under control. See the real product, in English or Italian.

FRONTDOOR / IN ACTION

Real software, fictional workspace. AI-generated narration. Public release in preparation; the code repository is not yet public.

Read the transcript ↗EN video ↗Video IT ↗

The problem

Your intranet should not be a graveyard of links.

Tools multiply. URLs change. Permissions drift. People lose time asking where things live — and IT keeps maintaining bookmarks nobody trusts.

Frontdoor turns that sprawl into a launchpad people actually use.

Before
  • Scattered bookmarks
  • Repeated sign-ins
  • Stale access lists
With Frontdoor
  • One searchable catalog
  • One Microsoft identity
  • Access by team and role
What you get

Simple for people.
Powerful for IT.

A focused experience for the whole organization, backed by the controls administrators need.

⌕
01

A catalog that stays useful

Search, tags, favorites, card and compact views. Every user sees the apps they can actually access — nothing else.

Search applications⌕
★ Favorites ⌘ Group by tag
◎
02

Microsoft sign-in

Authenticate through Microsoft Entra ID and provision people automatically on first login.

⌘
03

Access by group

Map apps to local or Entra groups, including inherited group membership.

↗
04

Connect any app

Launch plain links, forward signed SSO tokens, share a secure cookie, or open native Entra apps.

◫
05

Admin without config files

Manage apps, people, groups, branding, logs and backups from one clean interface.

◉
06

Built to be yours

Customize the experience, choose what to log, export a complete backup, and keep the service on infrastructure you control.

✓ Custom branding✓ Configurable retention✓ Portable backups✓ English & Italian UI
A closer look

One door.
Look at what opens.

Less searching for people.
More clarity for IT.
Explore six moments from the product.

INSIDE / FRONTDOOR
The Frontdoor demo catalog, showing tagged business applications and favorites
01 / 06

The whole workspace. Minus the noise.

One searchable home for the tools your team uses. Tags, favorites and clear descriptions turn a list of links into a useful starting point.

View full-size image ↗
The administration console listing applications, status and access modes
03 / 06

Keep the catalog useful. Keep IT in control.

Manage applications, visibility and destinations in one place. An explicit configuration replaces scattered bookmarks and stale spreadsheets.

View full-size image ↗
Comparison of an IT owner with sixteen applications and a user with seven assigned applications
04 / 06

Same door. Different possibilities.

In our demo, the IT owner sees sixteen apps; a team member sees seven. Group assignments make the catalog relevant to the person signing in.

View full-size image ↗
Diagram showing Frontdoor integration options including direct links, SSO, shared sessions and Microsoft Entra
05 / 06

Your stack doesn't need to start over.

Direct links, signed SSO, shared sessions or Microsoft Entra: pick the connection that fits each application.

View full-size image ↗
The Frontdoor audit trail recording administrative changes and their context
06 / 06

Changes leave a trail.

See how the configuration evolves, with a dedicated audit view for administrative actions. Visibility doesn't stop at the sign-in screen.

View full-size image ↗

Captured in our demo workspace · Select an image to see it in full detail.

Documentation

Up and running
in minutes.

Install with Docker, connect Microsoft Entra, add your apps. Everything else is in the docs.

Quickstart

docker compose up -d

Then open http://localhost:3001 and sign in with Microsoft. Full Docker guide →

Users

Home, search, favorites, your personal menu.

Admins

Apps and SSO, groups, users, logs, backup.

Operators

Install, configure, connect Entra, upgrade.

Integrators

API, satellite app auth, plugins.
Security by design

Your front door should be a strong one.

Frontdoor keeps identity at Microsoft, sessions away from browser scripts, and authorization close to the apps it protects.

01

Secure sessions

Signed JWTs are stored in httpOnly cookies, never exposed to frontend JavaScript.

02

Traceable changes

Privileged actions have a dedicated audit trail with configurable retention.

03

Defensive defaults

Parameterized queries, sanitized SVG content, CSRF state validation and rate limits are built in.

04

Self-hosted control

Your catalog, database and operational data stay in the environment you choose.

Open source

Less hunting.
More opening.

Frontdoor is open source under the MIT license. Read the code, run it with Docker, open an issue or send a pull request.

View on GitHub