Switch from DS Logon to myAuth

You have a working myAuth account for IPPS-A, milConnect, ID Card Office Online and TRICARE sites.

About 20 minNeed: CAC + reader, or an active DS LogonNeed: A phone for Okta Verify

Walkthrough video in production

Real screen, real clicks, fake Soldier. Until it is up, the written steps below are the walkthrough.

Filmed on the live system with a CAC, every name and number swapped for a test Soldier before recording.

Step by step

01
Know why
DS Logon is being retired and sunsets September 30, 2026. myAuth replaces it on IPPS-A, milConnect, ID Card Office Online and TRICARE sites.
02
Start while your CAC works
Go to a site that uses myAuth and choose to create an account. Prove who you are with your CAC or an active DS Logon.
Do this now. Setting up is much harder without a working CAC or DS Logon.
03
Activate and set a password
Activate the account and set your password.
04
Add security methods
Add Okta Verify on your phone. Add a backup too, like your smart card or an email code.
05
Sign in with your CAC
Choose 'Sign In with CAC', pick your certificate, and enter your PIN.
06
Or sign in with your phone
With Okta Verify, approve the push on your phone and tap 'Yes, It's Me'. This works without a CAC reader.
Some app users got kicked out when they switched apps to copy a code. The push approval avoids that.
07
Use it for IPPS-A
Since August 17, 2026, IPPS-A self-service and the IPPS-A mobile app need myAuth on personal devices.

! Login.gov and ID.me are for VA sites, not DoD sites like milConnect or IPPS-A.
! DS Logon accounts unused for 180 days are turned off. This can strand family members.
! Too many wrong logins can lock your myAuth account. DMDC fixes it with a password reset.
! myPay has its own login. It is not covered by this change.