Apache Syncope artifacts are distributed in source and binary form under the terms of the Apache License, Version 2.0. See the LICENSE and NOTICE files included in each artifact for additional license information.

Use the links below to download a distribution of Apache Syncope. It is good practice to verify the integrity of the distribution files.


All past releases can be fetched from ASF archives.

Verifying Releases

When downloading from a mirror please check the SHA1 checksums as well as verifying the OpenPGP compatible signature available from the main Apache site. The KEYS file contains the public keys used for signing the release. It is recommended that a web of trust is used to confirm the identity of these keys.

You can check the OpenPGP signature with GnuPG via:

gpg --import KEYS
gpg --verify *syncope*.asc

You can check the SHA1 checksum with:

sha1sum --check *syncope*.sha1