PAA 02-26 - Transition of Marine Corps Total Force System Access Requests from AutoSAAR to Department of Defense Enterprise Identity, Credential, and Access Management

Scope

PAA 02-26 retires AutoSAAR as the authoritative method for requesting, modifying, and revoking Marine Corps Total Force System (MCTFS) end-user access. Effective 21 September 2026, Department of Defense Enterprise Identity, Credential, and Access Management (E-ICAM) takes over. E-ICAM runs an identity-based workflow. The requestor or the supervisor starts an access request, then designated officials validate it before access is provisioned.

The advisory changes the submission method only. It does not remove the requirement for commands to appoint and maintain qualified Terminal Area Security Officers (TASOs). It does not supersede TASO cybersecurity, account management, oversight, or incident reporting duties set by IRM 2300.17 and GENADMIN CMC Washington DC C4 CY 1709-01. Automated creation of an account does not by itself establish need-to-know or entitlement to an MCTFS role.

Audience

• S-1 and IPAC admin specialists requesting and processing MCTFS access.
• 0102, 0111, and 0170 admin specialists.
• Supervisors validating role assignment and Information Assurance training dates.
• Information Owners and Information System Security Managers completing functional and security reviews.
• Commanders and directors appointing TASOs and validating privileged mainframe access.

Dates

• 17 September 2026. Last day to submit through AutoSAAR, legacy email, or a locally routed DD Form 2875. Requests not approved by this date require resubmission in E-ICAM.
• 21 September 2026. E-ICAM becomes the required path for every new create, modify, or revoke request.
• 25 September 2026. Requestors verify official email, telephone, and supervisor in E-ICAM. Supervisors validate assigned role and Information Assurance training date for their people.
• 30 September 2026. Accounts not validated are subject to immediate disablement and require a new request.

Action language

• Paragraph 1 places current advisories under the reference tab of the MISSA portal and directs addressees to disseminate to subordinate commands.
• Paragraph 2 sets the background and the 21 September 2026 effective date.
• Paragraph 3 limits the scope of the change to submission method and preserves TASO duties.
• Paragraph 4.a requires E-ICAM for new create, modify, and revoke requests beginning 21 September 2026.
• Paragraph 4.b requires a valid Common Access Card or Personal Identity Verification credential plus an active E-ICAM identity.
• Paragraph 4.c requires requestors to verify official email address, telephone number, and supervisor information in E-ICAM no later than 25 September 2026.
• Paragraph 4.d directs supervisors to validate assigned role and Information Assurance training date no later than 25 September 2026, and directs Information Owners and Information System Security Managers to complete their reviews in the E-ICAM workflow.
• Paragraph 4.d.1 requires supervisors to be registered in E-ICAM before a user names them as Manager or Supervisor.
• Paragraph 4.d.2 subjects accounts with Information Assurance certification older than one year to disablement unless the user updates it and the supervisor validates it.
• Paragraph 4.d.3 subjects accounts not validated by 30 September 2026 to immediate disablement and a new request submission.
• Paragraph 4.e bars AutoSAAR, legacy email, and locally routed DD Form 2875 submissions after 17 September 2026 absent specific direction from the MCTFS access management authority.
• Paragraph 5 holds commands to a primary and alternate qualified TASO and lists continuing TASO duties.
• Paragraph 6 states the E-ICAM end-user workflow does not replace appointment or establishment of privileged TASO, Limited Security Control Account, Zone Control Accessor ID, Division Control Accessor ID, or Department Control Accessor ID accounts unless the Marine Corps Cyberspace Operations Group directs otherwise.
• Paragraph 7 sets the request procedure and points to the DISA E-ICAM Help Guide and the E-ICAM-MCTFS Account Validation Quick Start Guide, both attached to the advisory on the MISSA portal.
• Paragraph 8 routes E-ICAM technical assistance to the DISA Global Service Desk and MCTFS role, documentation, functional approval, and mainframe account questions to the supporting MISSO.
• Paragraph 9 names the points of contact. CWO5 Joseph K. Moseley, MGySgt Ramsen DeKelaita, and CWO4 Christopher W. Mertins at (703) 432-9176, 9738, and 9217.

Continuing TASO duties

The advisory restates six TASO duties unchanged by the transition.

• Support users within the assigned mainframe security scope.
• Maintain awareness of users and accounts administered within scope.
• Validate account status and access against authorized mission requirements.
• Support account suspension, reactivation, revocation, and deletion.
• Report suspected misuse, security violations, and account discrepancies through cybersecurity and command channels.
• Review and terminate access when personnel transfer, separate, retire, or no longer require it.

References the advisory cites

• IRM 2300.17, Mainframe Terminal Area Security Officer (TASO) Policy and Procedures, 23 June 2020.
• GENADMIN CMC Washington DC C4 CY 1709-01, Mainframe Cybersecurity and TASO Duties and Responsibilities, 7 September 2017.
• MCTFS Personnel Reporting Instructions User Manual (MCTFSPRIUM).

Connection to Marine Corps policy

PAA 02-26 overrides the AutoSAAR submission path in MCTFS FoS Access Policy and Procedures 8.0 for manpower end-user access. The rest of the MISSA policy stands. TASO creation and deletion of the User ACID, the 30-day auto-suspend and 45-day auto-delete rule from MCEN Operational Advisory 294-16, and the finance access path through the paper DD Form 2875 to the RFF are untouched by the text of this advisory. Privileged mainframe security accounts stay under Marine Corps Cyberspace Operations Group procedures.

Status

Source MISSA portal, CAC restricted. Verify the current standing and any follow-on guidance on the MISSA portal reference tab before executing. The advisory carries two attachments, the DISA E-ICAM Help Guide and the E-ICAM-MCTFS Account Validation Quick Start Guide, both on the MISSA portal.