Documentation and reference library
The concepts, tools and reference material published by the DAF ICAM Knowledge Hub, indexed here so application owners can find what they need at each stage of enablement. Documents are held on the Government SharePoint site and open in a new tab; access follows the permissions on that site.
Playbooks, user guides and policy
| Document | Category | What it covers |
|---|---|---|
| What is DAF ICAM? | Concept | Identity, credential and access management as DAF ICAM implements it, for DAF personnel and mission partners. |
| How does DAF ICAM work? | Concept | How authentication, authorization and access governance fit together across the solution. |
| Why does DAF ICAM matter? | Concept | What changes for users, supervisors, security and application owners once an application is enabled. |
| DAF ICAM Application Registration Tracker | Tool | The program's registration tracker for applications in enablement. |
| DAF ICAM Policy and Guidance | Policy | DAF ICAM policy, memoranda and implementation guidance. |
| System Authorization Access Request (SAAR) Overview | User guide | What the SAAR is and where it applies. |
| System Authorization Access Request (SAAR) Process Guide | Process guide | Step-by-step SAAR process. |
| Submit a SailPoint Service Desk Request | Process guide | How to raise a SailPoint request with the service desk. |
| SailPoint Access Certification Guide | User guide | Completing access certifications in SailPoint. |
| Overview of SAML and Assertions | Reference | SAML and the assertions an integrated application receives. |
| Overview of Okta Authorization Servers | Reference | Okta authorization servers and how applications use them. |
| DAF ICAM Okta Attributes Guide | Reference | The user attributes Okta holds and passes to applications. |
| Non-CAC User Guide 1.6.6 | User guide | Access for users without a CAC. |
| Accessing the DoD E-ICAM Website | User guide | How to reach the DoD E-ICAM site. |
| E-ICAM for SIPRnet Applications | Reference | SIPRNet applications implement DoD E-ICAM rather than DAF ICAM; this is that program's site. |
Solution stack and service capabilities
Identity Provider
Okta
Centralized authentication and federation for DAF NIPRNet applications: SAML 2.0, OIDC and OAuth 2.0 single sign-on, adaptive policy, and authoritative user data aggregated from DAF sources.
Identity Governance and Administration
SailPoint IdentityIQ
Access request, certification and lifecycle governance: entitlement aggregation, role-based and attribute-based access control, and audit evidence for least privilege.
Digital SAAR
DAF ICAM workflow
Digital replacement for the paper DD Form 2875, routed and recorded against the owning application.
Enablement tracking
DAF ICAM registry
System of record for enablement progress: registration, routing, the IdP and IGA tracks, acceptance testing and cutover.
Content last reviewed 17 September 2026. Next review due 16 December 2026.