Next Generation Identity, Credential, and Access Management (NG-ICAM)
Overview
Buyer
Place of Performance
NAICS
PSC
Set Aside
Original Source
Timeline
Qualification Details
Fit reasons
- NAICS alignment with historical contract wins in similar service areas.
- Scope strongly matches core technical capabilities and delivery model.
Risks
- Past performance thresholds may require one additional teaming partner.
- Potential clarification needed on staffing minimums before bid/no-bid.
Next steps
Validate eligibility requirements, assign capture owner, and schedule partner outreach to confirm teaming strategy before submission planning.
Quick Summary
The Defense Information Systems Agency (DISA) is conducting market research through a Sources Sought Notice for Next Generation Identity, Credential, and Access Management (NG-ICAM) Support Capabilities. This effort aims to modernize the Department of Defense's (DoD) Enterprise-Identity, Credential, and Access Management (E-ICAM) framework, a critical component of the Department of War's (DoW) Zero Trust strategy. DISA seeks information from businesses, both small and large, to identify capabilities for a more automated, efficient, and secure E-ICAM system. Responses are due June 12, 2026, at 4:00 PM EDT.
Scope of Work
DISA is seeking capabilities across a broad range of E-ICAM areas, including:
- Identity Provider (IdP): Experience with SAML 2.0, OpenID Connect, and various credentials (CAC, ECA, PIV).
- Master Entitlement Record (MER): Creating and maintaining authoritative user access rights.
- Identity Governance & Administration (IGA): Experience with Role Based Access Control (RBAC) and Rule Based Access Control (RuBAC).
- Automated Account Provisioning (AAP): Automating user access provisioning via APIs or vendor connectors.
- Attribute Based Access Control (ABAC): Implementation or integration experience.
- Separation of Duties (SOD): Implementing checks to prevent access conflicts.
- Privilege Access Management (PAM): Controls for system-level and user-privilege access.
- Federation Hub: Enabling secure authentication and identity attribute sharing.
- Specialized ICAM: Experience with Disconnected, Disrupted, Intermittent, and Limited (DDIL) ICAM, Mission Partner Environment ICAM, and Top Secret and above ICAM Services.
- Technology & Operations: Experience with Software as a Service (SaaS) and Commercial-off-the-Shelf (COTS) solutions, operational capabilities management, and training/transition/customer service.
Contract & Timeline
- Type: Sources Sought / Market Research
- Incumbent: General Dynamics Information Technology (GDIT) currently performs portions under an Other Transaction Agreement (HC1084-22-9-0001) with a Period of Performance from January 1, 2022, to December 31, 2026.
- Anticipated Place of Performance: Fort Meade, MD.
- Response Due: June 12, 2026, 4:00 PM Eastern Daylight Time (EDT).
- Published: May 27, 2026.
Eligibility & Set-Aside
This is market research to determine potential small business set-asides, requiring at least two qualified small businesses to respond. The NAICS code is 541519 Other Computer Related Services with a $34 million size standard. Information on joint ventures, partnering, and current facility clearance levels is requested. The government may sponsor vendors for cleared access or hosted environments.
Submission & Evaluation
This is for informational purposes only and is not a Request for Proposal. Responses are voluntary, and no funds are available for preparation. Interested businesses should submit a brief capabilities statement package (no more than five pages) addressing the specific requirements. Submissions should be emailed to disa.scott.ditco.mbx.ps84-other-transaction-authority@mail.mil with the subject line "Sources Sought Notice: ICAM Support Capabilities." Proprietary information must be clearly marked.