Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal Government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a Federal Government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Buy Identity Products and Services

Find approved products and services for Federal Identity, Credential, and Access Management (FICAM) implementations, and helpful links for purchasing these items using GSA Schedules.

Other current and planned products and services can be found on the GSA ICAM Solutions Catalog and GSA ICAM Roadmap.

Products

The FICAM testing program – also known as the Federal Information Processing Standard 201 (FIPS 201) Evaluation Program – tests commercial products used in Personal Identity Verification (PIV) credentialing systems, physical access control systems (PACS), and public key infrastructures (PKI). These products are tested and approved to ensure you’re buying products that provide value and work well together.

The Approved Products List (APL) contains the official list of these tested products. There are currently two approved product cagtegories:

  1. PIV Cards
  2. Physical Access Control Systems

I can’t find a category or product?

    1. A product is removed when it has lost its certification due to security concerns. It is placed on the Removed Products List (RPL). 2.A category is deprecated after it has reached broad adoption or maturity. Any further testing is no longer needed (for example, card readers for logical access). A deprecated category is not the same as a removed product. Deprecated categories are shared through a FIPS 201 Program announcement. Contact us if you’re unsure if a product is fit for government use.

PACS Implementer Self-Assessment Toolkit

The FIPS 201 Evaluation Program in collaboration with the PACS Modernization Working Group created an operational self-assessment tool. The tool helps PACS implementers assess facility access systems that use PIV credentials. The assessment provides results to show alignment or disparity to FICAM and NIST guidelines.

Services

The following organizations offer Identity, Credential, and Access Management services to the Federal Government. If your organization has a relevant Identity, Credential, or Access Management service, contact us so we can add it to the list.

Government Identity Services

Business Identity Services

  • FPKI Individual Certificate Providers – Offers small numbers of digital certificates for business organizations and business persons, which are used to digitally sign documents and authenticate to a small number of government applications.
  • Trust Services for Businesses – Approved identity and credentialing services for businesses, and which the government has approved for federated identity services.

FedRAMP

GSA Multiple Award Schedule

GSA Multiple Award Schedule (MAS) provides access to long-term government-wide contracts. These contacts are with commercial firms that offer millions of commercial products and services at volume discount pricing. The MAS provides tools and expertise to shorten acquisition cycles, ensure compliance, and obtain the best value for innovative technology products, services, and solutions.

Note that the purchasing process may differ, depending on the particular product or service you want. If you need help, please contact icam at gsa.gov.