compare
Apereo CAS vs Keycloak
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Apereo CAS | Keycloak |
|---|---|---|
| Language | Java | Java |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 11k | 37k |
| Latest | v8.0.2 | 26.8.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 9 days between releases | about 14 days between releases |
| Active contributors | 5+ commit authors on the default branch in the last 90 days | 97+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Okta. Alternatives to Okta →
PartialApereo CASWeb single sign-on over CAS, SAML and OpenID Connect with MFA, common in universities.
Full replacementKeycloakSSO over OpenID Connect and SAML, user federation with LDAP and Active Directory, and MFA.
Apereo CAS
- v8.1.0-RC22026-09-26Documentationpre-release
- v8.0.22026-09-26Documentation
- v7.3.8.32026-09-22Please see this post.
- v8.1.0-RC12026-08-28Documentationpre-release
- v7.3.8.22026-09-07Please see this post.
Apereo CAS
unsigned The latest release, v8.0.2, carries no signature GitHub could verify.
Loading the security report
Keycloak
unsigned The latest release, 26.8.0, carries no signature GitHub could verify.
Loading the security report