compare
Apereo CAS vs Authelia
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Apereo CAS | Authelia |
|---|---|---|
| Language | Java | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 11k | 29k |
| Latest | v8.0.2 | v4.39.28 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 9 days between releases | about 2 days between releases |
| Active contributors | 5+ commit authors on the default branch in the last 90 days | 13+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Okta. Alternatives to Okta →
PartialApereo CASWeb single sign-on over CAS, SAML and OpenID Connect with MFA, common in universities.
PartialAutheliaSSO and MFA in front of a reverse proxy, plus an OpenID Connect provider, without user management UI.
Apereo CAS
- v8.1.0-RC22026-09-26Documentationpre-release
- v8.0.22026-09-26Documentation
- v7.3.8.32026-09-22Please see this post.
- v8.1.0-RC12026-08-28Documentationpre-release
- v7.3.8.22026-09-07Please see this post.
Authelia
- v4.39.282026-09-17docker pull authelia/authelia:4.39.28
- v4.39.272026-09-15handlers: use correct status code for consent redirects (#13155) (b1d294e) by @james-d-elliott
- v4.39.262026-09-12oidc: allow conformant alg none jarm (#13110) (2ce5b5b) by @james-d-elliott
- v4.39.252026-09-10notification: smtp ipv6 literal addresses (#13051) (ffa6a89), closes #13041 by @james-d-elliott
- v4.39.242026-09-09suites: preserve log colours under go test -json (#13048) (c004538) by @nightah
Apereo CAS
unsigned The latest release, v8.0.2, carries no signature GitHub could verify.
Loading the security report
Authelia
✓ signed The latest release, v4.39.28, carries a signature GitHub verified.
Loading the security report