DAF ICAM Technical Overview
Integration capabilities for application owners and developers.
For component definitions, see Understanding IdP and IGA. The tables below describe protocol, attribute, workflow and auditing capabilities to discuss with your technical team.
DAF ICAM Identity Provider (IdP) with Okta
A technical overview for developers and application owners
Core IdP technical capabilities
| Capability | Description |
|---|---|
| Centralized authentication and federation | The IdP confirms user identities through approved, secure credentials, primarily CAC-based authentication. Federation reduces password overload and enables Single Sign-On (SSO) across multiple domains and services. |
| Modern protocol support | The platform supports modern, secure protocols for seamless integration:
|
| Zero Trust security architecture | Integration capabilities include token-based authentication, encryption and centralized logging. See Zero Trust architecture for the security model. |
| Attribute aggregation | The IdP aggregates authoritative user data from multiple DAF and DoW sources, providing applications with necessary attributes consistently and reliably. |
See benefits by audience for the operational value of these capabilities.
DAF ICAM IGA with SailPoint
Automated, secure, and auditable access management for the enterprise
Core IGA technical capabilities
| Capability | Description |
|---|---|
| Automated access request workflows | Replaces paper-based DD Form 2875 with standardized digital System Authorization Access Request (SAAR) workflows. Automated approvals route requests to the right people and process them efficiently. |
| Identity lifecycle management | Manages the full lifecycle of user access, including provisioning when someone joins or changes roles and de-provisioning to revoke access upon departure or role change. |
| Dynamic and attribute-based access | A centralized identity warehouse supplies rank, organization, security clearance and training attributes to integration policies. See the ABAC definition. |
| Centralized entitlements and auditing | Creates an enterprise-wide source of truth for who has access to what, providing visibility for security operators and streamlining audits, including Financial Improvement and Audit Readiness (FIAR). |
| Privileged Access Management (PAM) integration | Works with PAM tools to centralize and secure privileged IT accounts so elevated access is controlled, monitored, and auditable. |
See benefits by audience for the operational value of these capabilities.
Next steps
Join an upcoming interactive DAF ICAM Launch & Learn Session for personalized answers and guidance from the DAF ICAM Enablement team.
- Understanding IdP and IGA
- Learn about the DAF ICAM Enablement Process.
- Begin the DAF ICAM enablement process by registering your application.
Content last reviewed 29 October 2026. Next review due 27 January 2027.