| Aerobase | Keycloak | WSO2 Identity Server | Gluu | CAS | OpenAM | Shibboleth IdP | |
|---|---|---|---|---|---|---|---|
| OpenID Connect/OAuth support | yes | yes | yes | yes | yes | yes | third-party |
| Multi-factor authentication | yes | yes | yes | yes | yes | yes | yes |
| Admin UI | yes | yes | yes | yes | yes | yes | no |
| OpenJDK support | yes | yes | yes | yes | no | ||
| Identity brokering | yes | yes | yes | ||||
| Middleware | NGINX, Wildfly | Wildfly, JBOSS | WSO2 Carbon | Jetty, Apache HTTPD | any Java app server | any Java app server | Jetty, Tomcat |
| Open source | yes | yes | Note 1 | yes | yes | yes | yes |
| Commercial support | yes | no | yes | yes | third-party | yes | third-party |
| Add federation metadata | no | no | yes | ||||
| Add metadata from URL | no | no | yes | ||||
| Installation | trivial | easy | difficult |
- The downloadable binaries on their site don't appear to include the latest security patches. While you could compile and package yourself from the source code, it's not clear if the latest security patches are open-sourced. (http://lists.jboss.org/pipermail/keycloak-user/2016-August/007281.html)
Seems that I also don't understand **is FusionAuth it free and/or opensource or not..**at several docs is declared as opensource, but here I found some pricing https://www.capterra.com/p/182987/FusionAuth/ So, does anybody know exactly?
Btw - Free means free to install, and open-source free to get (and change) code, right?
For my company I need to compare also several sso solutions (free and opensource only) , from this list: https://en.wikipedia.org/wiki/List_of_single_sign-on_implementations
Except from that list, FusionAuth is also required to be included! (gluu and openAM not, I don't know why)
So I am in doubt is FusinAuth free or not, but anyway I also recommend adding it at my research and also in above list:)
At my excel I have separated columns free and opensource.
For better comparison and understanding of sso solutions I also added this columns which I can recommend
to anyone who work on similar :
-"authorization supported?" (for several only authentication is),
-installation? (easy medium difficult),
-integration? (with different FE BE technologie, also e/m/d),
-mobile apps? (android, ios) supported or not
-Liveness (num /frequency of releases , github issues resolvance etc) ,
-Modern/popular?
..
I need to go more in depth to several solutions next weeks, so
anyone who work on similar - do not hesitate to contact me to share information and knowledge:)