CAGE Code vs SAM vs FCL — what's the difference?
Short version: SAM is the registration required to bid on federal contracts. CAGE is a 5-character ID you get automatically as part of that registration — you don’t apply for it separately. FCL is a completely different thing: a facility security clearance for classified work, and most small contractors never need one. Here’s how they actually relate.
1. SAM is the registration
The System for Award Management (SAM) is the government’s central registry for federal acquisition eligibility. Businesses and government entities alike use it: if you need to register to sell to government agencies, this is the one you complete. It’s the foundation everything else sits on.
2. CAGE is assigned automatically, not applied for
A CAGE (Commercial and Government Entity) code is a 5-character alphanumeric identifier the Department of Defense’s Defense Logistics Agency (DLA) uses to identify your business in federal systems — contracts, supply chain records, payment routing, and GSA’s procurement schedules. You don’t request one separately. When your SAM registration is submitted, your information is automatically sent to DLA’s CAGE Branch, which assigns the code as part of processing your registration. If you’re searching for how to “get a CAGE code,” the honest answer is: register in SAM, and it arrives with it.
Once assigned, that’s how downstream federal information systems use CAGE codes to recognize your business — contract-writing systems, DIBBS ordering, GSA’s schedules. Your NAICS codes travel alongside it in your SAM record, but they’re a separate identifier: NAICS classifies your industry for size-standard and set-aside purposes, CAGE just says which specific entity you are.
2b. Outside the US or Canada? It’s called NCAGE, and the order flips
The Defense Logistics Agency assigns CAGE codes for entities in the US and Canada. For entities located outside the United States and Canada, the equivalent identifier is an NCAGE (NATO Commercial and Government Entity) code — sometimes called a NATO CAGE code — requested through the NATO Support and Procurement Agency (NSPA)‘s ePortal, not DLA. NSPA either assigns the NCAGE code directly or forwards the request to your country’s own National Codification Bureau, depending on whether your country has one.
CAGE and NCAGE are functionally the same identifier under different names — the CAGE program spans both. Both run on the same NATO Codification System (NCS), which DLA also participates in. The process order is reversed, though: a US or Canadian entity gets its CAGE code automatically, after starting SAM registration. An entity elsewhere needs its NCAGE code first — before it can even complete SAM registration. This matters for small businesses and large suppliers alike — U.S. government procurement and solicitation processes assume whichever code applies to you already exists by the time you’re bidding.
3. FCL is a different thing entirely — and most contractors don’t need one
A Facility Clearance (FCL) is an administrative determination that a company is eligible to access classified information. The Defense Counterintelligence and Security Agency (DCSA) manages it, under the National Industrial Security Program. It has nothing to do with everyday federal contracting — it only matters if a specific contract requires classified access. And critically: you can’t just apply for one. A Government Contracting Activity or an already-cleared contractor has to sponsor your facility. That takes a documented, bona fide need — typically a DD Form 254 — not a box you check on your own initiative.
4. So which do you actually need?
| SAM registration | CAGE code | FCL | |
|---|---|---|---|
| What it is | Central registry for federal acquisition eligibility | 5-character alphanumeric ID identifying your entity in federal systems | Determination that a company can access classified information |
| Who assigns it | You complete it yourself, at sam.gov | DLA (US/Canada) or NSPA/your country’s NCB (elsewhere) | DCSA, under the National Industrial Security Program |
| Do you apply for it separately? | Yes — this is the application | No — arrives automatically with SAM registration | No — a Government Contracting Activity or already-cleared contractor has to sponsor you |
| Do you need it? | Yes, if you want to sell to the government at all | Yes, automatically, the moment you register in SAM | Only if a specific contract requires classified access — most small contractors never do |
Selling to the government at all → SAM registration. Any business or government entity that needs to register to sell to federal agencies must complete it. Required, full stop. A CAGE code comes with SAM registration automatically — nothing extra to do. An FCL only matters if a specific contract requires classified access, and even then, someone else has to sponsor you for it. If nobody’s told you that you need one, you almost certainly don’t.
Common questions
Who is required to have a CAGE code? Anyone who needs to register in SAM to do business with the US government gets the CAGE code assigned as part of that registration — it isn’t optional or a separate step.
What does it cost to get a CAGE code? Nothing. It’s assigned automatically as part of SAM registration, which is itself free. Anyone charging a fee specifically for a CAGE code is charging for something the government hands you at no cost.
Do CAGE codes expire or need to be renewed? The code itself doesn’t expire the way a SAM registration does — but DLA requires the underlying entity information to stay current, and an inactive or lapsed SAM registration can affect whether the CAGE record is treated as active. Keeping SAM current keeps CAGE current.
How do I get a CAGE code for an LLC or other business entity? The same way any entity gets one — by completing SAM registration under that entity’s legal name and structure. There’s no separate process by entity type. If your business already has an existing CAGE code and just needs an update — new address, new ownership, new NAICS codes — that’s a SAM record update. It’s not a request for a new CAGE code. DLA only issues a new code for an entity that hasn’t registered before.
What’s the difference between CAGE, NCAGE, and UEI? CAGE and NCAGE are the same identifier under different names depending on whether the entity is in the US/Canada (CAGE) or elsewhere (NCAGE) — see §2b above. A UEI (Unique Entity ID) is a different identifier entirely — the one that replaced DUNS in SAM registration itself, not a CAGE variant. Think of it this way: CAGE identifies your business at a specific physical location; UEI is your one unique entity identifier across your entire SAM record.
How can I look up or check the status of a CAGE code? DLA’s CAGE Search and Inquiry tool is the official public lookup — free, no SAM login required to search. If your code hasn’t shown up yet, check SAM’s own status tracker instead — it shows where your registration actually sits in processing, which is usually the real bottleneck.
How long does it take to get a CAGE code, and how difficult is it? SAM.gov and DLA don’t publish a single official processing-time figure. Paid registrars advertise everything from 10 business days to 6 weeks, but those numbers aren’t consistently sourced from either agency. Treat any specific day-count you see elsewhere as an estimate, not a guarantee. Difficulty-wise, there’s nothing to actively do: it’s a byproduct of a complete, accurate SAM registration, not a separate application. If your SAM registration is active and you still don’t have a CAGE code after several weeks, that’s a sign something in your registration needs attention — not a normal wait.
Do I need a separate CAGE code for each business location? Yes, if the locations are different physical addresses. A CAGE code identifies a specific legal entity at a specific physical address — the same entity at the same address never gets two codes, but genuinely separate locations each get their own unique CAGE code. Note also: CAGE codes are never assigned to P.O. boxes or commercial mail/shipping addresses — DLA requires a real physical address.
Want these dates and IDs watched for you? CertSeer is being built to track your SAM registration alongside 50+ other GovCon compliance items — CMMC, SDVOSB/VOSB, HUBZone, 8(a), state filings, and more — in one place. We’re pre-launch; email capture for early access launches with the rest of the site. In the meantime, check the SDVOSB/VOSB and 8(a) checklists if either program applies to you.
Sources
- acquisition.gov, FAR 52.204-16: Commercial and Government Entity Code Reporting — the CAGE code requirement and DLA assignment process
- SAM.gov: Entity Registration — SAM registration and eligibility
- DCSA: Small Business Guide to the Facility Clearance Process — FCL sponsorship requirements and NISP administration
- Acquisition.gov, PGI 204.1870-2: Maintenance of the CAGE file — one CAGE code per entity per physical address; P.O. boxes not accepted
- NSPA ePortal: NCAGE code request tool — NCAGE assignment for entities outside the US/Canada
- SAM.gov: entity registration status tracker — check where a registration sits in processing
This is general education, not legal or compliance advice — and it doesn’t tell you whether your own registration or clearance status is in good standing. Check directly with SAM.gov or your contracting officer, and keep your own advisors in the loop.