16

What are the differences between CAS (Central Authentication Service) and Keycloak (Identity and Access Management)?

dreamcrash
  • 47,137
  • 25
  • 94
  • 117
manvendra
  • 461
  • 2
  • 4
  • 15
  • 2
    CAS server's token must be verified by contacting the CAS server (so both user and app need to access the CAS server), while Keycloack's token are digitally signed so the app just need to verify the digital signature without contacting the Keycloack server. – Martheen Feb 22 '16 at 08:41
  • thanks a lot helps – manvendra Jul 28 '16 at 12:41
  • CAS Service Tickets are signed and can be verified without contacting the CAS Server. https://apereo.github.io/cas/development/installation/Configure-ServiceTicket-JWT.html – mnesarco Jul 04 '17 at 17:07
  • 3
    There should be many differences, but in practice both products provide centraliced Authentication and SSO with pluggable Authentication Mechanisms. One advantage of CAS over Keycloak is that you can deploy CAS on any JEE Application Server, while Keycloak is a standalone server integrated with Wildfly. So if you deploy your apps in Tomcat and want to use keycloak, you must install and run keycloak server in its own port, so you will end up running two application servers. – mnesarco Jul 04 '17 at 17:25
  • 4
    Please refer to https://gist.github.com/bmaupin/6878fae9abcb63ef43f8ac9b9de8fafd – Ghasem Sadeghi Mar 19 '20 at 16:07

1 Answers1

0

CAS doesn't support OAuth2 but Keycloak does. It is a big difference.