DAF ICAM Policy and Guidance

Department of the Air Force policy, memoranda, implementation guidance, and strategic documents for identity, credential, and access management.

Implementation timelines

The Compliance Timeline lists registration and migration deadlines for NIPRNet, SIPRNet and ICOFR-relevant systems. Use the governing documents below for the policy requirements behind those dates.

Memoranda and implementation guidance

DAF ICAM ATO Memo

Issued 24 June 2026

  • ATO approved through 30 June 2028.
  • Meets NIST 800-53 Rev 5 requirements.
  • Supports DAF Security Control Baseline requirements.

ICAM Implementation Memo

ICAM Implementation Memorandum

Issued 25 February 2026

  • All DAF NIPRNet applications and systems must register with DAF ICAM by 27 April 2026.
  • ICOFR-relevant systems must migrate to a DoW-approved ICAM solution by the end of FY 2026.
  • All existing digital DD Form 2875 processes on NIPRNet will be migrated to DAF ICAM by 01 January 2026.
  • All existing digital DD Form 2875 processes on SIPRNet will be migrated to DoW E-ICAM by 01 January 2027.
  • By 30 September 2027, all systems and applications must have adopted a DoW-approved ICAM Service Provider.

Implementation of SIPRNet Applications on DoW E-ICAM

Implementation of DoD E-ICAM on SIPR

Issued 5 August 2025

  • DISA will deliver and maintain the Secret Fabric (SIPRNet) ICAM services for the DAF.
  • By the end of September 2027, all DAF systems and applications operating on the Secret Fabric must onboard to the DoW E-ICAM service.
  • DAF ICAM is the DoW-mandated solution for systems and applications operating on NIPRNet.

DoD CIO Accelerating ICAM

DoD CIO ICAM Acceleration

Issued 26 November 2024

  • By the end of FY 2025, classified and unclassified, non-ICOFR-relevant systems should onboard to a DoD-approved IdP.
  • By the end of FY 2026, ICOFR-relevant systems must onboard to a DoD-approved ICAM solution.
  • By the end of FY 2027, classified and unclassified, non-ICOFR-relevant systems should onboard to a DoD-approved IGA.

DD Form 2875 Consolidation to DAF ICAM Memo

Issued 25 November 2024

  • All existing digital DD Form 2875 processes on NIPRNet will be migrated to DAF ICAM by 1 January 2026.
  • All existing digital DD Form 2875 processes on SIPRNet will be migrated to DAF ICAM by 1 January 2027.
  • Manual workflows based on PDF or paper forms must migrate by 31 December 2026 for NIPRNet and 31 December 2027 for SIPRNet systems.

DoD CIO ICAM Guidance Memo

Adoption of Initial DoD Identity, Credential, and Access Management Enterprise Services

Issued 17 May 2023

  • All Components will maximize the use of DoW enterprise ICAM capabilities.
  • Attachment B details the CIO-approved Component ICAM solutions.

Policy documents

DOD Instruction 8520.04

Access Management for DoD Information Systems

Issued 3 September 2024

  • Establishes policy, assigns responsibilities, and provides direction for managing access to DoD information technology resources hosted by systems and system components by person and nonperson entities in conformance with DoD Instruction 8500.01.
  • Establishes policy and prescribes procedures for systems and system components, including information, control, and weapons systems, that host DoD IT resources.

DAFMAN 17-1304

Identity, Credential and Access Management (ICAM)

Issued 18 August 2021

Explains how Airmen at all levels employ technologies and techniques to comply with DoD and Air Force ICAM policy when accessing Air Force information systems in accordance with relevant cybersecurity and data policies (SAF/CN).

DAF ZT Way Forward Memo

Department of the Air Force Zero Trust Execution Way Forward

Issued 13 November 2023

Subject: Department of the Air Force (DAF) Zero Trust (ZT) Execution Way Forward.

Strategic and operational documents

Zero Trust TASKORD 20260324

Department of the Air Force Zero Trust Implementation

Issued 24 March 2026

  • Zero Trust mandate: The Department of War requires shifting NIPRNet, SIPRNet, and Cloud One from perimeter defenses to a Zero Trust architecture to stop advanced cyber threats.
  • Core security shift: The defense posture assumes persistent compromise and transitions to a data-centric, identity-aware model.
  • End state: Establish a resilient network with continuous, dynamic access validation for all users, devices, and applications.

DAF ICAM CONOPS

Department of the Air Force Identity, Credential, and Access Management (ICAM) Concept of Operations

Issued 10 November 2022

Provides the vision for the To-Be DAF enterprise ICAM solution: a centralized identity platform with a governance framework supporting dynamic resource access and authorization services.

ACC ICAM I-PLAN

Air Combat Command ICAM Implementation Plan

Issued 13 December 2023

Identifies tasks, responsible parties, and timeframes for foundational cybersecurity services within a digital foundation connecting Air and Space Force members. The tasks enable DAF enterprise ICAM capabilities and services, based on a governance framework, to deliver the right access to the right entity for the right reason, anytime and anywhere.

DAF ICAM CONEMP

688th Cyberspace Wing (CW) Concept of Employment (CONEMP) Identity, Credential, and Access Management (ICAM)

Issued 2 August 2023

Identifies the functions, roles, and responsibilities required to execute and maintain ICAM operations and support the acquisition and fielding strategy of these capabilities.

DAF ICAM Strategy

Department of the Air Force ICAM Strategy

Issued 7 June 2021

Establishes DAF enterprise ICAM capabilities and services, based on a governance framework, to deliver a real-time ability to dynamically share and use all data authorized for each user or nonperson entity, anytime and anywhere.

Content last reviewed 29 October 2026. Next review due 27 January 2027.