compare
Apereo CAS vs Kanidm
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Apereo CAS | Kanidm |
|---|---|---|
| Language | Java | Rust |
| Licence | Apache-2.0 | MPL-2.0 |
| Stars | 11k | 5.4k |
| Latest | v8.0.2 | v1.11.2 |
| Last push | 2026-10-06 | 2026-10-05 |
| Release cadence | about 9 days between releases | about 20 days between releases |
| Active contributors | 5+ commit authors on the default branch in the last 90 days | 12 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Okta. Alternatives to Okta →
PartialApereo CASWeb single sign-on over CAS, SAML and OpenID Connect with MFA, common in universities.
PartialKanidmIdentity server with OAuth2, OpenID Connect, LDAP, passkeys and RADIUS.
Apereo CAS
- v8.1.0-RC22026-09-26Documentationpre-release
- v8.0.22026-09-26Documentation
- v7.3.8.32026-09-22Please see this post.
- v8.1.0-RC12026-08-28Documentationpre-release
- v7.3.8.22026-09-07Please see this post.
Kanidm
- v1.11.22026-09-11This update resolves 1 security issue which may cause auth confusion in some very specific client LDAP applications. We…
- v1.11.12026-08-14> KNOWN ISSUE: This version contains an issue where on a fresh install you may receive an error message such as:
- v1.11.02026-08-02This is the latest stable release of the Kanidm Identity Management project. Every release is the combined effort of our
- v1.10.52026-08-02This update resolves 1 security issue which may allow denial of service by an unauthenticated user. We have no evidence…
- v1.10.42026-06-23This update resolves 1 security issue which may allow denial of service by an unauthenticated user. We have no evidence…
Apereo CAS
unsigned The latest release, v8.0.2, carries no signature GitHub could verify.
Loading the security report
Kanidm
unsigned The latest release, v1.11.2, carries no signature GitHub could verify.
Loading the security report