Updated: November 2025
Note: When signing in with your CAC, the system now uses the cryptographic hash value stored on your card to securely match your CAC to your existing AOK account, instead of matching your email address.
We’re excited to announce that we're implementing CAC (Common Access Card) login authorization to enhance system security. This change means that users will soon be able to sign in using their CAC instead of a username and password.
Read our blog post about this for a deeper dive into why we’re adding CAC and what improvements it brings!
What is CAC Authorization?
A Common Access Card (CAC) is a smart card used by the U.S. Department of Defense (DoD) and other federal employees for secure identification and authentication. Using CAC for login allows:
Secure system access using smart card certificates
Two-Factor Authentication (2FA) via card + PIN
Compliance with federal cybersecurity standards
What’s Changing?
Feature | Current Process | With CAC Integration |
Login | Username + Password (will still be an option in addition to the CAC) | CAC Card + PIN |
Document Signing (see our guide) | Typed or drawn digital signature | Digitally signed via CAC |
What You’ll Need
To log in using your CAC, make sure you have the following:
Active CAC
Must be valid (not expired) and has valid certificates.
A CAC Reader
USB or a built-in reader compatible with your device.
Compatible Browser
Google Chrome (with extension)
Microsoft Edge
Mozilla Firefox
Note: Safari is not officially supported at this time.
Update Your Device
Ensure your system is up-to-date with the latest OS and security patches.
Clear Browser Cache
Old cached data can interfere with the new authentication method.
How to Log In with CAC (Once Available)
Visit the AOK login page and click Sign in with CAC
Insert your CAC into your card reader.
Click Sign In.
Select your authentication certificate.
Enter your CAC PIN.
Access granted!
⚠️ Note: If you’re not prompted for a certificate, try switching browsers or clearing your cache.
THINGS TO KEEP IN MIND:
CAC Session will only stay active a max of 8 hours while the CAC is inserted
Inactivity after 15 minutes will trigger the CAC session to timeout
Troubleshooting
Troubleshooting
CAC not detected: Ensure reader is connected
PIN not accepted: Check that you are using the correct certificate
Browser not prompting for certificate: Try a different browser or clear cache
Error Message:
An error occurred. A valid CAC was presented, but no account matches the associated credentials.
Session Expired. Your CAC has been removed or your session has expired. Please sign in again to continue.
Ensure your CAC is properly inserted and that your reader is connected. Clear your browser's cache and/or reload the web page.
Still unable to Sign In?
Report to support with error message and device/browser info.
Email: support@adyton.io
Phone: (623) 323-9502
Keywords
Keywords
cac, CAC, common access card, Common Access Card