compare
Kanidm vs Keycloak
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Kanidm | Keycloak |
|---|---|---|
| Language | Rust | Java |
| Licence | MPL-2.0 | Apache-2.0 |
| Stars | 5.4k | 37k |
| Latest | v1.11.2 | 26.8.0 |
| Last push | 2026-10-05 | 2026-10-06 |
| Release cadence | about 20 days between releases | about 14 days between releases |
| Active contributors | 12 commit authors on the default branch in the last 90 days | 97+ commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Kanidm replaces Keycloak. Alternatives to Keycloak →
PartialOpenID Connect and LDAP, without SAML.
Both replace Okta. Alternatives to Okta →
PartialKanidmIdentity server with OAuth2, OpenID Connect, LDAP, passkeys and RADIUS.
Full replacementKeycloakSSO over OpenID Connect and SAML, user federation with LDAP and Active Directory, and MFA.
Kanidm
- v1.11.22026-09-11This update resolves 1 security issue which may cause auth confusion in some very specific client LDAP applications. We…
- v1.11.12026-08-14> KNOWN ISSUE: This version contains an issue where on a fresh install you may receive an error message such as:
- v1.11.02026-08-02This is the latest stable release of the Kanidm Identity Management project. Every release is the combined effort of our
- v1.10.52026-08-02This update resolves 1 security issue which may allow denial of service by an unauthenticated user. We have no evidence…
- v1.10.42026-06-23This update resolves 1 security issue which may allow denial of service by an unauthenticated user. We have no evidence…
Kanidm
unsigned The latest release, v1.11.2, carries no signature GitHub could verify.
Loading the security report
Keycloak
unsigned The latest release, 26.8.0, carries no signature GitHub could verify.
Loading the security report