Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal Government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a Federal Government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Buy Identity Products and Services

Find approved products and services for Federal Identity, Credential, and Access Management (FICAM) implementations, and helpful links for purchasing these items using GSA Schedules.

Other current and planned products and services can be found on the GSA ICAM Solutions Catalog and GSA ICAM Roadmap.


The FICAM testing program – also known as the Federal Information Processing Standard 201 (FIPS 201) Evaluation Program – tests commercial products used in Personal Identity Verification (PIV) credentialing systems, physical access control systems (PACS), and public key infrastructures (PKI). These products have been tested and approved to ensure you’re buying products that provide value, and work well together.

The Approved Products List (APL) contains the official list of these tested products. There are currently two approved product cagtegories:

  1. PIV Cards
  2. Physical Access Control Systems

I can’t find a category or product?

  1. Products and services that have lost their certification due to security concerns are placed on the Removed Products List (RPL).
  2. Categories are deprecated after it has reached a level of broad adoption or maturity and further testing is no longer needed (for example, card readers for logical access). Deprecated categories are shared as a FIPS 201 Program announcement. A deprecated category is not the same as a removed product.

Contact us if you’re unsure if a product is fit for government use.


The following organizations offer Identity, Credential, and Access Management services to the Federal Government. If your organization has a relevant Identity, Credential, or Access Management service, contact us so we can add it to the list.

Government Identity Services

Business Identity Services

  • FPKI Individual Certificate Providers – Offers small numbers of digital certificates for business organizations and business persons, which are used to digitally sign documents and authenticate to a small number of government applications.
  • Trust Services for Businesses – Approved identity and credentialing services for businesses, and which the government has approved for federated identity services.


GSA Multiple Award Schedule

GSA Multiple Award Schedule (MAS) provide access to long-term government-wide contracts with commercial firms that provide access to millions of commercial products and services at volume discount pricing. The MAS offers tools and expertise to shorten acquisition cycles, ensure compliance, and obtain the best value for innovative technology products, services, and solutions.

Note that the purchasing process may differ, depending on the particular product or service you want. If you need help, please contact icam at