compare
Dex vs Keycloak
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Dex | Keycloak |
|---|---|---|
| Language | Go | Java |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 11k | 37k |
| Latest | v2.45.1 | 26.8.0 |
| Last push | 2026-10-05 | 2026-10-06 |
| Release cadence | about 55 days between releases | about 14 days between releases |
| Active contributors | 7 commit authors on the default branch in the last 90 days | 97+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Okta. Alternatives to Okta →
PartialDexFederates LDAP, SAML, GitHub and other connectors into OpenID Connect, without user management of its own.
Full replacementKeycloakSSO over OpenID Connect and SAML, user federation with LDAP and Active Directory, and MFA.
Dex
- v2.45.12026-03-03Quote groups reserved word in query replacer to fix MySQL 8.0+ storage migration (#4580)
- v2.45.02026-02-23The major version of gomplate has been bumped to v5.0.0, which includes breaking changes. Here is the full list.
- v2.44.02025-09-01Allow server startup with partial connector failures
- v2.43.12025-05-22Backport #4146 to 2.43.x
- v2.43.02025-05-19Generate access tokens for implicit & hybrid flows only when needed
Dex
✓ signed The latest release, v2.45.1, carries a signature GitHub verified.
Loading the security report
Keycloak
unsigned The latest release, 26.8.0, carries no signature GitHub could verify.
Loading the security report