Next Generation Identity, Credential, and Access Management (NG-ICAM)

The Defense Information Systems Agency is seeking input from industry to modernize the Department of Defense’s Enterprise Identity, Credential, and Access Management system under the Next Generation Identity, Credential, and Access Management initiative, aiming to strengthen the DoD’s Zero Trust architecture. This effort focuses on delivering automated, scalable, and secure ICAM capabilities across cloud and on-premises environments, including support for Top Secret/IL7 classified systems, disconnected and intermittent networks, and mission partner environments. Key technical requirements include implementation of SAML 2.0 and OpenID Connect, identity governance and administration, attribute-based access control, privileged access management, automated account provisioning through master entitlement records, and secure federation hubs. Offerors must demonstrate experience with ITIL, DESMF, NIST IAL/AAL, and the Risk Management Framework, and be prepared to support integration with PIV and CAC authentication systems. The solicitation is formatted as a sources-sought notice, not a formal procurement, and is designed to gather market capabilities to inform future acquisition strategies, with an emphasis on leveraging non-traditional acquisition methods such as Other Transaction Agreements. Responses are limited to a five-page capabilities statement submitted via email to the designated DITCO OTA mailbox by June 12, 2026, with submissions required to clearly identify any proprietary information in accordance with 41 USC 423. The requirement is reserved exclusively for small businesses and specific socioeconomic categories including small disadvantaged businesses, 8(a) firms, service-disabled veteran-owned small businesses, HUBZone businesses, and women-owned small businesses, with strict compliance expected under FAR 52.219-14 regarding limitations on subcontracting. While no formal evaluation factors, award methodology, or pricing data are included due to the preliminary nature of the notice, the government will sponsor facility clearances for vendors lacking them, and all submissions will become government property. The primary place of performance is Fort Meade, Maryland, with the contracting office located at Scott Air Force Base, Illinois, and no payment, invoicing, or contracting officer details are specified as this is a market research effort preceding a potential future award.