SSO 框架对比 Keycloak | WSO2 Identity Server | Gluu | CAS | OpenAM | Shibboleth IdP | OpenID Connect/OAuth support | yes | yes | yes | yes | yes | third-party Multi-factor authentication | yes | yes | yes | yes | yes | yes Admin UI | yes | yes | yes | yes | yes | no OpenJDK support | yes | yes | | yes | yes | yes Identity brokering | yes | yes | yes |