Purpose: This guide shows you how to correctly register for a Symphony account, ensuring you provide the mandatory SAM data and complete the necessary steps to set up your security credentials.

Symphony Administrators: You must provide documentation of your SAM.gov Points of Contact (showing your UEI, Name, and Email) to the Help Desk to activate your account.

Table of Contents

• Before You Start
• Steps

1. Start Your Registration and Validate Email

2. Verify and Confirm Company Data

3. Set Up Your Account and MFA

4. Request Account Activation from Administrator

• Troubleshooting
• Related Articles / Links

  

Before You Start

Make sure you have the following ready before you begin:

• An individual email address (group/distribution emails are not supported).
    
• An active SAM.gov record for your company.
    
• The UEI (Unique Entity Identifier) and CAGE (Commercial and Government Entity) code for the company that will be the Prime Contractor.

  

​One Account per Company per Portal Your Symphony account is hard-linked to the UEI you enter during registration.    You cannot use the same email address to access or register for multiple companies/UEIs. ​ If you need to represent another company, you must register a separate account using a different email address.  ​ ​​Submit a Ticket if you need to move an account.

Warning: You must register with the UEI for the company that is the Prime Offeror or Contract Holder. Do not use subcontractor or Joint Venture member data.

Steps

1. Start Your Registration and Validate Email

Go to the correct Symphony website for your contract vehicle to begin the process. 

1. See Portal Links and Access Requirements to verify the portal address. All portals (except Polaris) display the contract vehicle logo.
     
2. Accept the FOUO Notice: You must click Accept on the mandatory security and privacy warning message displayed on the welcome screen to proceed to the Sign In page. FOUO stands for For Official Use Only, which requires protection from public release.
     
3. Click Register Now on the Sign In page.
     
4. Enter your individual email address.
     
5. Enter the six-digit validation code sent to your email to confirm your address is correct.
    

Register Now link on the Symphony login page used to start the registration process.

  

2. Verify and Confirm Company Data

Symphony uses your SAM data to validate your organization's eligibility.

1. Enter your Prime Entity's SAM.gov UEI.
     
2. Enter the correct CAGE code (required only if multiple CAGE codes are assigned to your UEI).
     
3. Before proceeding, review and confirm that the company information retrieved from SAM is accurate.

   

Organization Registration screen where users confirm UEI and CAGE code before proceeding.

  

3. Set Up Your Account and MFA

Complete your personal profile and set up the mandatory security tool.

IMPORTANT: SMS (Text Message) support for GSA ended April 30, 2026. You must use an app. 

MFA codes are not allowed via email due to security requirements, and users with international or U.S. Territory phone numbers must use an authenticator app for all contract vehicles.

1. Enter your first and last name and create a password that meets the security requirements.
     
2. Set up Multi-Factor Authentication (MFA) using an Authenticator App or Text Messaging (when available).
      
3. You must validate this step by entering the six-digit code provided by your MFA tool.

  

MFA Setup screen with a QR code for authenticator setup and a field to enter the six-digit code.

4. Request Account Activation from Administrator

After registration, your account is in Initial status. 

You cannot sign in until your status is changed to Active.  

Which Activation path are you?

- I am a Business User (Staff): Contact your company’s Symphony Administrator. 

They must have an account, sign in, and activate your account via the Administration tab in the same portal for the same company. See Administrator Guide: Activating Users and Assigning Permissions.

- I am the Symphony Administrator (SAM POC): You must verify your identity with the Help Desk. Submit a Ticket with a screenshot of your SAM.gov Points of Contact tab. 

To be activated, your screenshot MUST show your:
    1. UEI
    2. Full Name
    3. Email Address

Example of the required SAM.gov verification elements.

  

Troubleshooting

Issue	Fix
Cannot re-register after an account was deleted.	The system does not permit re-registration with the same email. You must submit a ticket to reinitialize the old account. ​
The validation email is not received.	Check your spam or trash folders. The email may come from noreply@gsa.gov or symphony@apexlogic.com.  ​
Organization not found during registration.	Our SAM connection may not be working or your entity record may have an "ID assigned" status. You must ensure your company's record is fully Active in SAM before attempting to register. ​
You cannot set the password.	Verify that the password meets all the listed requirements. ​
You registered for the wrong company.	Submit a Ticket with your email address and provide the correct UEI/CAGE code to have the account moved or revoked. ​
Account Inactive after registration.	Standard Users: Ask your internal Admin to activate you. Administrators: Submit a Ticket with your SAM.gov POC data (UEI, Name, and Email).  ​ Note: A screenshot of the error message or your SAM.gov Roles/Account Details is not sufficient for activation. ​
No one was notified of my registration.	Symphony does not automatically email your company's SAM Point of Contact. You must manually notify your Administrator.  If you are the administrator: You must Submit a Ticket to the Help Desk yourself. ​

Related Articles / Links

• SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data—Guide on verifying your UEI/CAGE data and POCs at SAM.gov
  
  
• Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation—Guide on the activation process
  
  
• Administrator Guide: Activating Users and Assigning Permissions—Guide for Administrators on user management
  
  
• Submit a Ticket to the Symphony Help Desk—For technical account issues

Purpose: This guide shows you how to correctly register for a Symphony account as a government employee, ensuring you use your official email, confirm your organization, and understand how to obtain your final system roles.

Commercial Vendors & Bidders: This guide is strictly for official government employees (.gov or .mil). Commercial contractors bidding on contract vehicles must register using their company's SAM.gov UEI. Your domain will automatically route you during sign-in.

Table of Contents

• Before You Start
• Steps

1. Accept Security Notice and Validate Email

2. Confirm Organization

3. Set Up Account and MFA

4. Verify Activation and Request System Roles 

• Troubleshooting
  • Changing Your Government Email Address or Transferring Agencies
• Related Articles / Links

Before You Start

Make sure you have the following information and tools ready before you begin:

• An individual, official government email address (must end in .gov or .mil).
    
• A time-based Authenticator Application to set up Multi-Factor Authentication (MFA).
    
• The Office Code for your contracting organization.

Steps

1. Accept Security Notice and Validate Email

Accept the security notice to access the registration page. Then validate your official email address. Entering an official .gov or .mil email address will automatically route your account to the Government Registration and AAC/Office Code validation steps.
  

1. Select the Register Now link on the login page.
     
2. Enter your individual email address.
     
3. Enter the six-digit verification code sent to your email to confirm your address is correct.

Register Now link to begin registration.

2. Confirm Organization

You must identify your role and confirm your organizational affiliation using the required code.

1. Enter the code for your Contracting Office.
     
2. Select Lookup Organization.
     
3. Confirm the Organization information displayed by choosing YES to proceed.
     

Screen showing the field for the Contracting Office code.

3. Set Up Account and MFA

Complete your profile and set up the mandatory security tool to secure your login.

IMPORTANT: SMS (Text Message) support for GSA Contract Vehicles ended April 30, 2026. You must use an app. 

Users with international or U.S. Territory phone numbers must also use an authenticator app.

 

1. Complete the fields to connect your email address (username) to your first and last name.
     
2. Create a password that meets the security requirements.
     
3. Set up Multi-Factor Authentication (MFA) using an Authenticator Application or Text Message (when available) to receive your six-digit code. You must validate this step by entering the code from your MFA tool.
      

MFA setup screen showing the QR code and the field for the six-digit code.

4. Verify Activation and Request System Roles

Your account is automatically activated upon successful registration, but specific permissions may be required.

• A confirmation page displays after successful registration, and your account is ready for immediate use.
    
• If you are a Program Office user or evaluator, you may need specific permissions. Contact your agency administrator to assign the appropriate roles for your tasks.

  

Confirmation page displaying a success message.

Troubleshooting

Issue	Fix
The verification email is not received.	Check your spam or trash folders. The email may come from noreply@gsa.gov or symphony@apexlogic.com. ​
The verification code results in an error.	Ensure there are no additional spaces in the temporary code. ​
The Office Code is unavailable.	Submit a Ticket if an office code is unavailable. ​
You cannot set the password.	Verify that the password meets all the listed requirements. ​
You fail to complete the MFA setup step.	Submit a Ticket for an MFA reset. ​
You cannot access the necessary features/reports.	Your account requires specific roles (e.g., Program Official, Evaluator). Contact your agency administrator for assignment. ​

  

Changing Your Government Email Address or Transferring Agencies

If you change your email address, do not submit a ticket for a manual move:
  

1. Register a New Account: Use the registration link to register your new official .gov or .mil email address.
     
2. Request Role Re-Assignment: Contact your Agency Administrator or Program Office Lead to assign your evaluation roles and permissions to your new email address.

If you have transferred to a new Contracting Office, DoD Activity Address Code (AAC), or buying command, do not attempt to re-register:
  

• Submit a Ticket: Contact the Help Desk and request an Agency Organization Link Update.
    
• Required Info: Provide your current government email, your new Contracting Office AAC / Code, and your updated Department/Agency name. Tier 2 Support will re-link your active profile so you maintain your historical account logs and active portal permissions.

Related Articles / Links

• MFA Setup & Security Guide: Authenticator Apps and Access Codes—More details on MFA requirements
    
• Submit a Ticket to the Symphony Help Desk—For technical help with MFA resets or Office Codes
    
• Portal Links and Access Requirements—For available contract vehicles

Purpose: This guide helps you successfully sign in to Symphony, handle the mandatory Multi-Factor Authentication (MFA) step, and resolve the "Account Inactive" message by following the correct approval path.

Table of Contents

• Before You Start
• Steps

1. Sign In and Authenticate

2. Activate an Inactive Account

3. Reset Your Password

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following crucial facts before attempting to sign in:

• Your account status must be Active (not Initial) to access the platform beyond the login screen.
    
• You must have your Multi-Factor Authentication (MFA) tool ready (Authenticator App or text-messaging phone). MFA codes are not allowed via email due to security requirements and users with international or U.S. Territory phone numbers must use an authenticator app.

    

Steps

1. Sign In and Authenticate

Signing in happens in two steps. First, enter your credentials. Then, enter the MFA security code.

1. Verify the URL (Uniform Resource Locator): Ensure the website address or logo matches the correct Contract Vehicle for your account.
     
2. Accept the FOUO Notice: You must click Accept on the mandatory security and privacy warning message displayed on the welcome screen. FOUO stands for For Official Use Only.
     
3. Enter your registered email address and password.
      
4. Click Sign In.
   • Typing credentials on the wrong portal URL triggers an "Authentication Failed" error even if the email and password is correct.
       
5. You will then be prompted to enter the six-digit code from your MFA tool.
     

Important: SMS (Text Message) support for GSA Contract Vehicles ended April 30, 2026. You must use an app. See MFA Setup & Security Guide: Authenticator Apps and Access Codes.

  

Sign In page showing the email and password fields where users enter credentials.

  

2. Activate an Inactive Account

If your account is inactive, the next step depends on your role.

• If you are a Business User (Staff)
  Your account is in Initial status. You must contact your organization's Symphony Administrator and ask them to register, sign in and change your status from Initial to Active on their Administration screen.
    
• If you are the SAM POC (Administrator)
  To be verified as an Administrator, you must provide proof from SAM.gov.

Steps to get this data:

1. Log in to SAM.gov.
2. Search for your company and click on the Entity Name.
3. Go to the Points of Contact tab on the left-side menu.
4. Take a screenshot (or print to PDF) with the UEI, Your Name, and Email visible.
   • Verify your SAM permissions/Administrator role allows you to show the email address.
5. Submit a Ticket with this attachment.

  

⚠️ CRITICAL: Submit the Correct Documentation. 

You must provide a screenshot from SAM.gov that includes ALL THREE of these items:
        1. The UEI (Found in the SAM.gov header)
        2. Your Full Name
        3. Your Email Address (Important: If this is missing, we cannot activate you)

Note: You must be a SAM administrator to make the email visible.

Example of the correct SAM.gov Points of Contact screen.
Do NOT send a screenshot of the Symphony "Account Inactive" message. We cannot use it to verify your account.

  

3. Reset Your Password

If you receive an "Authentication Failed" message after entering your password, use the reset option. Authentication Failed can mean an incorrect email, password OR trying to log into the wrong portal URL.

1. Click the Forgot Password link on the Sign In page.
     
2. Enter your registered email address and click Submit.
     
3. Check your email (including spam/trash folders) for the reset link.
     
4. Follow the link to create a new password that meets the security requirements.

  

Screen displaying the 'Authentication Failed' status message and the Forgot Password link to reset credentials.

Troubleshooting

Issue	Fix
You are seeing an error message after entering credentials.	Verify your URL first. You may be trying to sign in to the wrong Contract Vehicle portal. If the URL is correct, use the Forgot Password link. ​
Account Inactive after registration.	You must contact your company's Symphony Administrator to change your status from Initial to Active. Note: If you are the Administrator/SAM POC, submit a ticket to the Help Desk with your SAM documentation. ​
MFA code is not working or expired.	The code has expired or is incorrect. Check your phone's time synchronization. If the issue continues, see the MFA Setup & Security Guide: Authenticator Apps and Access Codes guide for troubleshooting. ​
No password reset email received.	Check your spam or trash folders and the website address. The email may come from noreply@gsa.gov or symphony@apexlogic.com. If the email doesn't arrive, your account may not be registered at that email address; try registering a new account. ​

Related Articles / Links

• MFA Setup & Security Guide: Authenticator Apps and Access Codes—Detailed troubleshooting for MFA issues
    
• Submit a Ticket to the Symphony Help Desk—For SAM POC verification or technical lockouts
  
  
• Register Your Symphony Business Account—If you need to start a new registration
    
• SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data—Guide to verify the correct URL for your account

Purpose: This is your complete roadmap for using Symphony. It shows you the steps to register, gain active access, and find the correct guides for your daily work.

Table of Contents

• Before You Start
• Steps

1. Confirm Your Prerequisites and Portal

2. Register, Authenticate, and Activate

3. Start Your Workflow

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following crucial facts and have the correct items ready:

• SAM Data: Industry users must have an active SAM.gov record. Symphony uses this data to validate your UEI, CAGE code, and Points of Contact.
    
• Correct Website: You must register and sign in at the exact website URL for your specific contract vehicle (e.g., Polaris, OASIS+).
    
• MFA Readiness: You will need an Authenticator App or a cell phone for Multi-Factor Authentication (MFA) setup.

Steps

1. Confirm Your Prerequisites and Portal

The first step is verifying your registration details and finding the correct portal.

1. Check the data elements your organization needs for your account.
   • Industry Reference: SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data
       
2. Locate the correct website URL for your solicitation or contract vehicle.
     
3. Review your role's specific requirements (e.g., unique Alliant 3 rules or portal distinction).
    

The Symphony home page with contract vehicle logos, where users identify the portal.

  

2. Register, Authenticate, and Activate

After finding your portal, follow these steps to create your account and gain full access.

1. Complete the registration process based on your organizational role.
   • Commercial Vendors & Bidders: Reference: Register Your Symphony Business Account 
       
   • Official government users (.gov / .mil): Reference: Government Account Registration: Contracting Officials, Program Offices, and Evaluators
       
2. Set up your Multi-Factor Authentication (MFA) right away.
   • Reference: MFA Setup & Security Guide: Authenticator Apps and Access Codes
       
3. After you register, your administrator must approve your account before activation.
   • Reference: Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation
           

Diagram illustrating the Symphony access process: registration → MFA setup → activation.

3. Start Your Workflow

Once your account is active, use this workflow to find the guides you need. These cover your day-to-day tasks, such as building assets or submitting proposals. Users needing formal submission rights must be granted Proposal Manager or Administrator roles to complete formal actions.
  

1. If you are preparing a bid (Offeror):
   1. Start by setting up your company assets: Company Profile Guide: UEI, SAM.gov Details, and Corporate Settings.
        
   2. Review the final bidding process: Proposal Assembly & Submission Guide: Master Workflow and Order of Operations.
        
2. If you are a Contract Holder (Post-Award):
   1. Monitor tasks and manage your contract: Awarded Contracts: Post-Award Setup, Contact Assignments, and Notifications.
        
   2. Track active opportunities: Task Orders and Market Research: Monitoring Opportunities, Submitting Q&A, and Proposal Bidding.

 

Dashboard with the My Company and Solicitations icons highlighted for navigation.

Troubleshooting

Issue	Fix
Account Inactive after registration.	Contact your company's Symphony Administrator. Ask them to change your status from Initial to Active.  Note: If you are the Administrator/SAM POC, submit a ticket to the Help Desk with your SAM documentation. ​
MFA code is not working or I lost my phone.	See the MFA Setup & Security Guide: Authenticator Apps and Access Codes guide for troubleshooting, or Submit a Ticket to the Symphony Help Desk (for lockouts). ​
I cannot find my contracts or company assets.	Check your registration was on the correct Contract Vehicle website (URL) and that your company's UEI is correct. ​

  

Related Articles / Links

• Submit a Ticket to the Symphony Help Desk—General Support
    
• Discover the Symphony Platform and Developer—Platform Context
    
• Proposal Assembly & Submission Guide: Master Workflow and Order of Operations—Industry Partner's main workflow
    
• Awarded Contracts: Post-Award Setup, Contact Assignments, and Notifications—Contract Holder's main workflow

Purpose: Use this guide to identify the correct Symphony contract vehicle portal, sign in successfully, and avoid access errors caused by using the wrong website.

Table of Contents

• Before You Start
• Steps

1. Identify Your Contract Vehicle

2. Confirm Your Contract Vehicle Portal

3. Register, Sign In, and Activate

4. Use MFA Correctly Across Contract Vehicles

5. Understand Contract Vehicle Data Boundaries

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you have the following ready:

• Your contract vehicle name (example: ASTRO, OASIS+). All portals (except Polaris) display the contract vehicle logo.
   
• MFA Readiness: You will need an Authenticator App or a cell phone for Multi-Factor Authentication (MFA) setup.

Steps

1. Identify Your Contract Vehicle

Because some sites do not have a special logo (like Polaris) or use a shared agency logo (like DHA), always check the website address (URL) at the top of your browser to make sure you are in the right place. Symphony supports the following contract vehicles:

GSA Contract Vehicles 

Contract Vehicle	URL	Description
Alliant 3	idiq.gsa.gov	Symphony is available for existing offerors on a shared portal. The solicitation was released on June 28, 2024, and closed on January 10, 2025.
ASTRO	astro.app.cloud.gov	Symphony is available for Contract Holders and Government Customers. The contract’s base ordering period began in November 2021.
OASIS Plus	idiq.gsa.gov	Symphony is open for existing offerors and new offerors interested in continuous on-ramping and rolling awards. Contract Holders and Government Customers can refer to GSA eBuy for ordering activities.
Polaris	polaris.app.cloud.gov	Symphony is available for existing offerors. The solicitation was released on March 25, 2022, and closed on August 10, 2022.
OASIS (Legacy)	idiq.gsa.gov	Symphony is available for historical data. The OASIS contract is closed and has been succeeded by the Oasis Plus contract.

Contract Vehicle	URL	Description
USSOCOM SOFGSD	ussocom-sofgsd.app.cloud.gov	Symphony is available for existing offerors. The solicitation was released on March 30, 2026, and closed on May 28, 2026.
GSP	dha-ems.symphonyps.com	Symphony is available for Contract Holders and Government Customers. The contract’s base ordering period began in January 2024.
HEC	dha-ems.symphonyps.com	Symphony is available for Contract Holders and Government Customers. The contract’s base ordering period began in October 2023.
MQS2-NG	dha-ems.symphonyps.com	Symphony is available for Contract Holders and Government Customers. The contract’s base ordering period began in June 2024.
Omnibus	dha-ems.symphonyps.com	Symphony is available for Contract Holders and Government Customers. The contract’s base ordering period began in June 2022.
MQS (Legacy)	mqs.symphonyps.com	Symphony is available for historical data. The MQS contract is closed and has been succeeded by the Medical Q-Coded Support and Services-Next Generation (MQS2-NG) contract.

2. Confirm Your Contract Vehicle Portal

Once you have identified the contract vehicle for your solicitation or award: 

1. Navigate to the Symphony website tied to that contract vehicle.
     
2. Verify the URL (on the Address Bar) and agency logo on the sign-in page. All portals (except Polaris) display the contract vehicle logo.
   • Logging into the wrong portal results in an "Authentication Failed" error even if the email and password is correct.
       
3. Stop if the URL or logo does not match your contract vehicle.
     

Warning: Using the wrong website will cause an authentication failed error. If the URL is correct, use the Forgot Password link.

The Symphony home page shows contract vehicle agency logos for confirmation. 

3. Register, Sign In, and Activate

Once you are on the correct contract vehicle website, you can either register or sign in to your account. 

To Register Your Account

1. Click Register Now after accepting the Official Use notice.
     
2. Complete the registration process based on your organizational role.
     
3. Set up a preferred method of Multi-Factor Authentication (MFA).
   • Note: Each contract portal is a distinct security environment requiring separate MFA setup. Users with multiple accounts should label authenticator app entries by portal (e.g., "Symphony ASTRO" vs. "Symphony OASIS+").
       
4. After you register, your administrator must approve your account before activation. 

Sign in to Your Account

1. Open the Symphony website for your contract vehicle.
     
2. Confirm the portal is correct by checking the URL (on the Address Bar) or agency logo on the sign-in screen.
     
3. Enter your email address and password.
     
4. Select Sign In.
     

Note: If you see Account Inactive, your administrator must approve your account before activation. See Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation for more information.

4. Use MFA Correctly Across Contract Vehicles

Each Symphony website needs its own MFA setup.

• Setup: Complete the MFA step for every contract vehicle you use.
    
• Rename: The default name is always SymphonyPS. Rename the codes in your authenticator app so you know which one belongs to each site (for example: OASIS+ or ASTRO).
    
• Unique Codes: Use the specific code for the website you are visiting. Codes for one site will not work on another.

  

5. Understand Contract Vehicle Data Boundaries

Your access and assets are separated by contract vehicle and organization identifiers. You cannot share company assets across different UEIs/CAGE codes or contract vehicles. Company assets uploaded in one vehicle portal do not populate in another.

Troubleshooting

Issue	Fix
Authentication Failed after entering your password.	Check Your Portal: You are likely on the wrong contract vehicle website. Verify the URL and the Agency Logo on the sign-in page before trying again. ​
MFA code is not working.	Portal Mismatch: The code may be for a different Symphony website. Ensure you are using the code specifically labeled for the URL you are currently visiting.  ​ ​See the MFA Setup & Security Guide: Authenticator Apps and Access Codes guide for troubleshooting, or Submit a Ticket to the Symphony Help Desk (for lockouts). ​
I cannot find my contracts or company assets.	Check Data Boundaries: Verify you registered on the correct URL and that your UEI and CAGE code are correct. Data is isolated by contract vehicle and cannot be transferred or viewed across different portals. ​

Related Articles / Links

• Register Your Symphony Business Account—How to register as a business user
    

• Government Account Registration: Contracting Officials, Program Offices, and Evaluators—How to register as a government user
     

• MFA Setup & Security Guide: Authenticator Apps and Access Codes—How to set up MFA
    

• Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation—How to sign in to Symphony and get account activation 
    

• Submit a Ticket to the Symphony Help Desk—For technical account issues

Purpose: This guide helps you find your contract website. It explains why SAM.gov data (UEI, CAGE, POC) is required for your registration.

Table of Contents

• Before You Start
• Steps

1. Select the Correct Contract Website

2. Verify Your Required SAM Data 

3. Understand the SAM POC Role

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following crucial facts about the System for Award Management (SAM):

• SAM Record Status: Your company's record on SAM.gov must be completely Active. If your SAM.gov record is in Draft, Expired, or ID Assigned status, Symphony cannot validate your company credentials during registration or perform a backend data refresh.
    
• Symphony uses the SAM.gov Unique Entity Identifier (UEI) and Commercial and Government Entity (CAGE) code to validate your organization's eligibility.
    
• Only the SAM.gov Points of Contact (POCs) are considered trusted company representatives (Administrators).

 

Exact Match Requirement for Administrators
  
To be verified and approved by Support as a Symphony Administrator, your registered Legal First Name, Last Name, and Email Address must match your entity's SAM.gov Points of Contact record character-for-character. Typos, name mismatches, or alias email variations will delay initial Admin activation.

  

Steps

1. Select the Correct Contract Website

You must use the exact website link for your contract vehicle. If you use the wrong site, your administrator cannot find you to activate your account.

Contract Vehicle	Agency	Website Link
Alliant 3	GSA	https://idiq.gsa.gov
ASTRO	GSA	https://astro.app.cloud.gov
(Legacy) OASIS	GSA	https://oasis.app.cloud.gov
OASIS+ (OASIS Plus)	GSA	https://idiq.gsa.gov
Polaris	GSA	https://polaris.app.cloud.gov
GSP / HEC / MQS2-NG / OMNIBUS	DHA	https://dha-ems.symphonyps.com
(Legacy) MQS	DHA	https://mqs.symphonyps.com
USSOCOM SOFGSD	DOD	https://ussocom-sofgsd.app.cloud.gov/

2. Verify Your Required SAM Data

During registration, Symphony needs specific identifiers to validate your organization and get a snapshot of your SAM.gov record.

• Provide the SAM.gov UEI for the company that will be the prime contractor or award recipient.
    
• If your UEI has more than one CAGE code, you must include the correct CAGE code.
    
• During registration, review the name and address retrieved from SAM to ensure accuracy.

Note: You can check your SAM data, including Points of Contact, by using the SEARCH feature directly on SAM.gov. 

If you update your entity data inside SAM.gov (e.g., business name, address, POCs, or rep/cert details) and need Symphony to fetch/synchronize the latest SAM.gov record for a pending offer, contact the Help Desk to refresh your SAM.gov snapshot.

  

SAM Data tab in My Company where users can confirm their UEI, CAGE, and address information.

  

3. Understand the SAM POC Role

The POCs listed in SAM are crucial for granting administrative access.

Providing Proof for Manual Admin Activation

If your email address is hidden on SAM.gov public searches, you must sign in to SAM.gov, navigate to your entity's Points of Contact tab, and ensure your email is unmasked/visible before capturing a full-page screenshot to submit with your support request.

1. If you are a SAM POC, download or save a copy of your SAM record showing your name and email address. Work with your organization to update your user role within SAM.gov so you have permission to view entity contact details.
     
2. You will need to submit this documentation to the Help Desk to verify your access and activate your account as an Administrator.
     

If you are not listed as a POC, contact a listed Administrator to activate your account after their Symphony registration and activation is complete.

SAM Entity Record showing the Points of Contact tab.

4. How SAM.gov Data Refresh Works

Updates made directly inside SAM.gov can take 24 to 48 hours to process and become publicly available across federal database APIs.

  

Submitted Proposals Retain Historical Data
  
Updating your entity details on SAM.gov (or performing a SAM refresh in Symphony) will not alter previously submitted proposals. Federal evaluation rules require submitted proposals to remain frozen with the SAM.gov entity details that were active at the exact time of formal submission.

Initiating a Data Refresh

Symphony does not automatically pull mid-solicitation, post-submission, or post-award updates from SAM.gov. Once your updated entity status is active on SAM.gov, follow these steps to synchronize your workspace:

1. Submit a Ticket: Contact the Help Desk requesting a manual backend SAM Data Refresh.
     
2. Provide Entity Details: Include your company's 12-character UEI and 5-character CAGE code.
     
3. Specify the Update: Add a brief note detailing which specific fields were updated on SAM.gov (e.g., Legal Business Name, Business Address, or POC details).

Important Requirement for Awarded Contract Holders 
  
Federal procurement regulations require awarded Contract Holders on active task order management portals (e.g., ASTRO, DHA) to provide formal contractual documentation before backend contract records can be modified. You must attach a PDF copy of your official Contract Modification (SF-30) reflecting your updated entity details (such as a Novation Agreement, Name Change Mod, or Address Update) with your ticket.

Troubleshooting

Issue	Fix
Organization not found during registration.	Your entity record may have an "ID assigned" status. You must complete the registration process in SAM first. ​
You registered for the wrong company.	Submit a Ticket with your email address and provide the correct UEI/CAGE code to have the account moved or revoked. ​
You cannot find the Administrator (SAM POC).	Log in to SAM.gov, search for your company, and find the names on the Points of Contact tab. ​

Related Articles / Links

• Register Your Symphony Business Account—How to use this data for registration
    
• Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation—How to contact the Help Desk for SAM POC verification
    
• Submit a Ticket to the Symphony Help Desk—For technical account issues

Purpose: This guide shows you how to set up MFA (your login security code) and fix common sign-in problems.

  

Important Security Restrictions 

- Email Codes Not Allowed: MFA passcodes cannot be sent via email.

- GSA SMS Deprecation: SMS (Text) support for GSA Contract Vehicles ended April 30, 2026. GSA portal users must use an Authenticator App.

- Multi-Portal Access: Each portal is an isolated security environment. If you access multiple vehicles (e.g., Polaris, ASTRO), set up a separate MFA token for each and rename the token in your app to prevent overwriting keys.

Table of Contents  

• Before You Start
• Steps

1. Set Up with an Authenticator App (Recommended)

2. Set Up with Text Messaging (SMS)

3. How to Change Your MFA Device or Method

• Troubleshooting & Clock Synchronization
• Related Articles / Links

Before You Start

Make sure you know the following security rules before you begin:

• MFA is required for every user and every sign-in attempt.
    

• Google Authenticator is the recommended app, as it supports multiple accounts.

  

Steps

1. Set Up with an Authenticator App during Registration

This is the most reliable method. It creates a new 6-digit code every 30 seconds on your phone or browser extension.
  

1. Install App: Download an Authenticator App (e.g., Google Authenticator) on your smartphone or a browser extension.
     
2. Scan Code: On the Symphony Registration MFA screen, scan the QR code with your app or extension.
     
3. Confirm Code: Enter the 6-digit passcode into Symphony and click Validate and Complete.
     
4. Label Token: Rename the entry in your app (e.g., "Symphony - Polaris") to keep accounts organized.
     

MFA setup screen showing the QR code and the field to enter the six-digit passcode.

2. Set Up with Text Messaging (SMS)

Note: Available for non-GSA portals only. US 10-digit numbers only.
  

1. Select SMS (Text Message) on the setup screen.
     
2. Select your mobile carrier and your 10-digit phone number.
     
3. Click Send My Code, enter the 6-digit code into Symphony, and Validate and Complete.

   

MFA setup screen showing the option to select SMS and the fields for carrier and phone number.

3. How to Change Your MFA Device or Method

If you need to switch your MFA method (e.g., got a new phone), the steps depend on whether you can still sign in.

If You Are...	Action Required
Signed In	Go to Profile Icon ​→ My Credentials. Scan the new QR code directly using your new device.
Locked Out / New Device	Submit a Ticket with your registered email and Contract Vehicle to request an MFA Reset.

 

My Credentials tab showing the QR code display for MFA changes.

Troubleshooting & Clock Synchronization

Most "Incorrect Code" errors are caused by device time drift. Passcodes require exact cryptographic time synchronization with the server. 

30-Second Time Sync Fix 

• iPhone (iOS): Go to Settings → General → Date & Time. Toggle Set Automatically OFF, wait 5 seconds, and toggle it back ON. 
    
• Android: Go to Settings → System / General Management → Date and time. Toggle Automatic date and time OFF, wait 5 seconds, and toggle it back ON. 
    
• Google Authenticator App: Open app menu ⋮ → Settings → Time correction for codes → Sync now. 

  

Issue	Fix
Incorrect Code after syncing	Your stored token may be corrupted or overwritten. Submit a Ticket for a Fresh QR Code Reset. ​
Delayed SMS Text Code (takes more than 2–3 minutes).	Restart your phone, turn off Wi-Fi, or switch to an authenticator app. ​
Lost Device / Replaced Phone	Submit a Ticket with the email address associated with your account. The Help Desk will assist with setting up the new device. ​

  

Related Articles / Links

• Individual Account Settings, MFA Setup, and Email Updates—Guide on how to change your profile/MFA while signed in
    
• Submit a Ticket to the Symphony Help Desk—For MFA resets or technical lockouts

Purpose: This guide helps you, as a Symphony Administrator, manage other users in your company. It explains their roles, how to activate accounts, and how to fix common administration issues. 

Self-Registration Model: There is no "Add User" feature. You cannot manually invite or create accounts. Your staff must register themselves using your company's UEI (Unique Entity Identifier) and CAGE (Commercial and Government Entity) code at the correct website to appear in your list.

Team Collaboration Does Not Require Shared Logins: You do not need a shared email account (like proposals@company.com) for your team to collaborate in Symphony. All active users registered under your company’s UEI automatically share access to your company’s central workspace, project library, and active solicitations. To give a new team member access, simply have them self-register with their own individual work email address, then set their status to Active on your Administration tab.

Table of Contents 

• Before You Start
• Steps

1. Access the Administration Area

2. Activate or Modify a User’s Status

3. Update a User's Group Membership (Role)

• Troubleshooting
• Related Articles / Links

Before You Start

Managing users in Symphony works differently than most platforms. Please keep these three rules in mind:

• Administrator Status: You must be an Active Administrator to see the Administration link. If you are in "Initial" status, you must verify your own account before you can activate others.
    
• Strict Individual Account Policy: Symphony strictly prohibits shared, generic, or group email addresses (e.g., proposals@company.com, info@company.com). Each user account must be bound to a single named individual. Shared logins violate federal security controls and will result in account suspension.
    
• One Login = One Company: Your Symphony login is tied to a single legal entity (UEI and CAGE code). You cannot access multiple companies or different UEIs with a single email address.
  • Need to manage a second company? You must register a separate account using a different email address.

  

Steps

1. Access the Administration Area

Once you are an Active Administrator, your team's names will automatically populate in your dashboard as they register for the same company in the same portal.

1. Sign in to Symphony.
     
2. Click the Administration link in the sidebar.

  

Administration link in the side navigation bar where administrators manage user accounts.

Don't see a colleague's name? If the list is empty or a specific person is missing, it is almost always due to one of the following: They haven't registered yet.    They used a different UEI or CAGE code (common for companies with multiple branches).    They registered on a different Symphony portal (e.g., Polaris vs. OASIS+).

  

2. Activate or Modify a User’s Status

User status controls if an account is active, inactive, or locked.

1. Click on the row with the User’s Name.
     
2. Select the user’s status from the pop-up menu and click Save User Status.

  

Status	Definition (What it means for the user)
Active	The user has full access to use the system. ​
Initial	The user has registered but needs your approval. They will see an "inactive account" message. ​
Delete	The user loses access. Warning: This prevents the user from re-registering with the same email address again. ​
Suspended	The account is locked due to security policy violations (e.g., detection of shared/group email usage, multiple failed login attempts, or extended inactivity). Admins should not activate generic or shared email profiles. If an account was suspended for generic email usage, require the user to self-register with an individual email address instead. ​

User Administration screen showing the status dropdown menu with 'Active' selected.

 

3. Update a User's Group Membership (Role)

Group Membership defines the user's permissions. The user's status must be Active for the new role to take effect.

1. Modify user permissions within the Administration link by selecting from the Group Membership options.
   
   
2. Click Save Group Membership

Role	Definition (What the user can do)
Administrator	Has full management access and can submit proposals. ​
Open Market Proposal Manager	Can submit proposals during open solicitations. Cannot access the Administration link. ​
Program Manager / Contract Manager	Can submit proposals for their awarded contract vehicle. ​
Staff	Staff accounts are view/edit only. They will not receive notification emails or have access to formal submission buttons. ​

Group Membership menu where administrators assign user roles such as Administrator or Staff.
  

About Notifications: Only users with communication privileges (i.e., Administrator or Open Market Proposal Manager) receive submission or clarification notifications. 

Contract notifications (RFPs, Orders, etc.) are managed via a Distribution Email in the My Company → Contracts tab for eligible contract holders. 

Staff users do not receive notifications.

Troubleshooting

Issue	Fix
A user cannot be seen in the Administration list.	Confirm that the user registered on the correct Symphony website and for the same company (matching UEI and CAGE code) as you. See Portal Links and Access Requirements for the list of URLs. ​
Roles are missing (e.g., Contract Manager/Program Manager).	Key roles like Contract Manager are assigned in the proposal submission or contract management sections, not the Administration link.
An account was deleted, and the user needs to register again.	If an email was deleted by mistake and needs to be re-used, an Administrator must submit a Help Desk Ticket to have the old email cleared. ​
The SAM record for a user was updated, but the role didn't change.	SAM updates do not automatically change roles. You must manually assign the user to the Administrator group. See SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data for sync information. ​
I need to register for and work in multiple companies.	You must use separate email addresses. Each Symphony account is locked to one UEI and CAGE. To manage a different company, register a new account with a different email. ​
User account was automatically set to Suspended or locked.	Cause: The account was flagged for using a shared/group email address (e.g., proposals@ or info@) or security policy violations.  Fix: Shared accounts are prohibited under security compliance. Advise the user to register a new account using their unique, individual business email address. Once registered, set their new individual profile to Active. ​

Related Articles / Links

• Submit a Ticket to the Symphony Help Desk—To reinitialize a deleted account
    
• Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation—For Administrator (SAM POC) verification steps
    
• Register Your Symphony Business Account—For rules on self-registration
    
• Proposal Assembly & Submission Guide: Master Workflow and Order of Operations—Industry Partner's main workflow
    
• Awarded Contracts: Post-Award Setup, Contact Assignments, and Notifications—Guide on post-award contract management 
  

Purpose: This guide shows you how to update your profile, change your email, and manage your MFA (login security code). To manage other users, see Administrator Guide: Activating Users and Assigning Permissions.

Table of Contents

• Before You Start
• Steps

1. Update Your Personal Profile (Self-Service)

2. Change Your Password or MFA Method (Self-Service)

3. Change Your Email Address (Self-Service)

4. Update Your Organization Link (Non-Self-Service)  

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following essential rules for account maintenance:

• You must be able to sign in to complete self-service profile updates.
    
• If your company name or address changes but the UEI (Unique Entity Identifier) remains the same, the team can do a quick data refresh.
    
• If your company merged with or was bought by another company, your account may need to move. An acquisition often requires a Novation — a formal legal transfer of your contract to the new company. Submit a ticket so the team can help.

 

Steps

1. Update Your Personal Profile (Self-Service)

You can easily change your job title and phone number after signing in.

1. Click the Profile Icon in the top right corner.
     
2. Select the My Information tab.
     
3. Update your job title or phone number (for display purposes only).
     
4. Click the Save the Contact Information button.

 

My Profile screen showing the My Information tab highlighted.

2. Change Your Password or MFA Method (Self-Service)

You can change your password or set up a new authenticator app from your profile.

1. Click the Profile Icon in the top right corner and select the My Credentials tab.
     
2. To change your password: 
   1. Enter a new password that meets the security requirements.
        
   2. Click Change Password to save the update. 
        
3. To update your MFA method:
   1. Add or update an authenticator app to your device.
        
   2. Scan the QR code.
        
   3. If you have multiple accounts, rename the codes to tell them apart.

  

The My Credentials screen showing the password change and QR code sections.

3. Change Your Email Address (Self-Service)

Email addresses cannot be directly edited on an existing account profile.

• For Vendors/Contractors/Offerors: Register a new account using your new email address.
    
  Once active, ask your company's Symphony Administrator to assign your roles and delete the old email from the Administration tab.
    
• For Government Users: Register a new account using your new official .gov or .mil address.
    
  Once active, contact your Agency Administrator or Program Office to assign your system roles.

  

Registration screen showing the email entry field for a new registration.

4. Update Your Organization Link (Non-Self-Service)

If your company's legal name, address, AAC or UEI/CAGE code is incorrect, you must submit a ticket for the change.

1. Submit a Ticket to the Help Desk.
     
2. Include your email address and the correct AAC or UEI and CAGE (Commercial and Government Entity) code.
     
3. For businesses, the Symphony team will determine if the change requires a SAM refresh or full account move. They will complete the required action.
    

Note: You must use a unique email address for each company when registering for multiple companies.

 

Help desk ticket submission form showing the fields for company details.

Troubleshooting

Issue	Fix
You cannot access multiple companies with one login.	Your email can only be linked to one company per Contract Vehicle. You must register with a unique email address for each company. ​
You need to change your name on the account.	You cannot change your name yourself. Submit a Ticket to the Help Desk for a name correction. ​
Your old email is still linked to the company.	Ask your Symphony Administrator to remove your old email address from the Administration screen. ​
Your profile information is not saving.	Ensure all fields (phone number, job title) are complete and within the character limit. Click the Save the Contact Information button. ​

Related Articles / Links

• Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation—How to check if your account is active
    
• Administrator Guide: Activating Users and Assigning Permissions—Guide for Administrators on how to remove an old email address
    
• MFA Setup & Security Guide: Authenticator Apps and Access Codes—MFA troubleshooting
    
• Submit a Ticket to the Symphony Help Desk—For technical account issues

Purpose: This guide helps you navigate the Support Center to find solutions, explains the fastest way to submit a technical ticket, and outlines the expected response time from the Help Desk team.

IMPORTANT: Account Access & "Inactive Account" Messages Support agents can only activate accounts for verified SAM.gov Points of Contact (POCs) as Administrators. For security and data privacy, Support cannot activate staff accounts or reveal who your company's internal Administrators are. The "One Email, One Company" Access Rule (For Admins, Staff, & Consultants): In Symphony, each email address functions as a single key linked to only one company UEI per portal.  If you are an Administrator or Consultant managing multiple companies on the same contract vehicle, you cannot use the same email address for more than one profile.     You must register each company using a unique email address or email alias (e.g., name-companyA@domain.com).      If you are a Staff Member / Consultant: Contact your internal manager, contracts lead, or SAM.gov POC. They must log into Symphony and switch your status to Active on their Administration tab.    If you are a SAM.gov POC (Requesting Admin Access): Submit a ticket and attach a full-page screenshot of your SAM.gov Points of Contact tab showing your UEI, Role, Name, and Email.

Table of Contents

• Before You Start
• Steps

1. Find Answers in the Knowledge Base

2. When to Submit a Support Ticket

3. Track Response Times   

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following crucial facts before contacting support:

• You must know your Contract Vehicle (the specific website URL (Uniform Resource Locator)) and your company's UEI (Unique Entity Identifier) for account-related issues.
    
• There is no direct phone number available for support.
    
• If you need to log in to Symphony, click here to find the correct URL.

Self-Service Troubleshooting Matrix

What problem are you experiencing?	Immediate Solution / Next Step
"Account Inactive" / Cannot log in after registering	Review the 'Is your account Inactive?' banner above to determine if you need SAM.gov verification (Admins) or internal activation (Staff). Review the Symphony Sign-In Guide. ​
Forgotten Password / MFA Reset	Use the Forgot Password link on your portal login page or review MFA Setup & Security Guide: Authenticator Apps and Access Codes. ​
Need to add a team member	Administrators cannot "invite" users. Each user must self-register first. Review Administrator Guide: Activating Users and Assigning Permissions. ​
Registering for multiple companies	Each company profile requires a unique individual email address (hyphenated aliases permitted; plus signs + prohibited). ​
Cannot find the right portal link/not authorised to access this portal	Ensure you are not attempting to log into the Support Help Desk header link, which is restricted to internal support agents. The Knowledge Base is outside Symphony. Check official contract vehicle web addresses in Portal Links and Access Requirements. ​

Steps

1. Find Answers in the Knowledge Base

The fastest way to find an answer is to use keywords in the search bar.

1. Access the Support Center: Go to the Help Desk portal (Help and Information/Support).
   
   
2. Enter Keywords: Enter a keyword in the search box. For example, searching for "Multi-Factor Authentication (MFA)" or "Password" yields many useful results.
   
   
3. Refine Search: The search uses a "starts-with" mechanism, displaying exact matches first. Do not type a full question.
      

The Knowledge Base search bar showing a convenient keyword-based searching mechanism.

2. When to Submit a Support Ticket

Please open a ticket with Symphony Support if you need assistance with:

• SAM.gov Administrator Verification: You are a listed SAM.gov Point of Contact requesting initial Administrator activation.
  
  
• MFA Reset Requests: You lost access to your authenticator app and need your security token reset.
  
  
• Technical Questions: You encounter an error message during proposal submission or document upload. The Symphony Support Center provides technical platform support only.

Technical Boundary Notice:
Support agents cannot evaluate adequacy, interpret compliance, or offer policy and legal procurement determinations regarding vendor submissions.

(For security and data privacy, Support agents cannot grant staff permissions, confirm who your company's internal Admins are, or bypass internal approval workflows).

If you cannot find a solution, submit a ticket for a guaranteed response within the service window.

1. Click the Submit a Ticket button in the top right corner of any help page.
     
2. Fill out the form completely, providing your email, name, and the contract vehicle you are using.
   
   
3. Describe the Issue: Explain your problem clearly. Include the Contract Vehicle, the Symphony feature that is failing, and a screenshot of any error message.
     
4. Click the final Submit button.

Ticket submission form showing fields for contact information and issue description. 

3. Track Response Times

Responses are provided only during business hours.

1. Check Service Window: Responses are provided within four business hours (8:00 am - 8:00 pm ET) from Monday to Friday, excluding Federal Holidays.
     
2. Check Spam: If more than four hours pass during a regular business week, check your junk/spam folders for the client.support@apexlogic.com email address.
     
3. Video Conference: If your issue requires a meeting, submit a ticket requesting a video conference, and the team will set up a meeting via Google Meet or another tool.
     

Email inbox showing a new message from the support team.

Troubleshooting

Issue	Fix
You submitted a ticket but didn't get a response within 4 business hours.	Check your Spam or Trash folders for an email from client.support@apexlogic.com. ​
You are having an issue that requires a phone call or meeting.	There is no direct phone number. Submit a ticket and request a video conference; the team will set up the meeting. ​
Your search is returning poor results.	Use keywords (e.g., "MFA," "UEI") instead of typing a full question, as the search mechanism works best with partial matches. ​

Related Articles / Links

• Submit a Ticket to the Symphony Help Desk—The direct link to our Customer Service Representatives and Technicians
    
• SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data—For verifying your UEI
    
• Portal Links and Access Requirements—For available contract vehicles

Purpose: This guide outlines the platform's security compliance. It also provides the mandatory technical rules for preparing and uploading all file submissions.

Table of Contents  

• Before You Start
• Steps

1. Prepare Documents for Upload

2. Review Supported Security Classifications

3. Review Platform Security and Compliance   

• Troubleshooting
• Related Articles / Links  

Before You Start

Understand the following technical and regulatory constraints regarding document uploads:

• Platform vs. Requirement: Symphony is a secure document delivery system. While the platform enforces technical limits (like file size and type), it cannot validate the content of your files. You are responsible for ensuring your documents meet the specific criteria outlined in the government's RFP.
    
• Finality of Uploads: Symphony support cannot modify, replace, or "fix" a document once it has been included in a submitted proposal. If you discover an error in your uploaded evidence after submission, you must follow the solicitation's instructions for retraction or amendment.
  
  

Make sure you know the following mandatory rules and technical limits for all file uploads:

• Tagging Prerequisite: Tag all evidence documents (PDFs) before uploading them to Symphony. Tagging must be done outside of Symphony. See the Past Performance: Adding Projects, Experience, and Performance Data guide for full instructions.
    
• File size threshold: Files must be under 20MB (unless specified otherwise by the solicitation). Optimize large scanned PDFs prior to upload.
    
• File names cannot exceed 250 characters.
    
• Prohibited: Classified or encrypted documents are strictly prohibited.
    

Note on Agency-Approved Password-Protected Files: If the requesting agency explicitly allows password protection for a document, ensure you follow the solicitation's exact submission instructions or contact Support if the automated scanner flags the file during upload.

  

Document Status Color Key

The file folder icons use color-coding to indicate their current status.

Folder Color	Status	Meaning
Orange	Documents Present	The folder contains one or more uploaded files.
Gray	Empty	The folder is currently empty; no files have been uploaded. ​
White	Open/Active View	The folder is currently open or selected by the user. ​

Steps

1. Prepare Documents for Upload

You must follow specific technical and formatting rules before uploading files to the system.

1. Files must be uploaded in Portable Document Format (.pdf) or the specific file type requested by the solicitation.
   • Important: PDF Portfolios cannot be processed by evaluators or automated system scanners. You should merge pages into a single, standard PDF using Combine Files or Insert Pages.
       
2. Do not combine multiple files into a "zip" folder. Files must be uploaded individually to ensure evaluators can access and review each document’s tags and metadata correctly.
     
3. Files must be uploaded directly from your computer. Drag-and-drop from cloud storage (like SharePoint or Google Drive) is not supported.

Document upload window showing a file attachment and a size limit warning.

2. Review Supported Security Classifications

The system handles sensitive government data and restricts certain file types.

1. Supported Documents: You may submit documents marked as:
   • CUI (Controlled Unclassified Information)
   • FOUO (For Official Use Only)
   • SBU (Sensitive but Unclassified)
       
2. Prohibited Documents: Classified or encrypted documents are not permitted.

Document library view showing read-only files.

3. Review Platform Security and Compliance

Symphony follows federal security standards to protect and manage your data.

1. The platform is hosted on cloud.gov with a Federal Information Security Modernization Act (FISMA) Moderate ATO (Authorization to Operate).
     
2. All data is protected by encryption in transit and at rest.
     
3. Every file uploaded to Symphony undergoes automated malware and virus scanning. Files flagged by the system will be blocked immediately to protect the government environment.

 

Compliance visualization showing the text 'FISMA Moderate ATO' and data protected by encryption on a cloud server.

Troubleshooting

Issue	Fix
File attachment fails to upload.	Check the file size (must be under 20MB) and ensure the file name is under 250 characters. ​
Text form fields, draft boxes, or file uploads fail or throw errors after copying/pasting from Microsoft Word.	Paste the text into a plain-text editor (like Notepad on Windows or TextEdit in Plain Text mode on Mac) first. This strips out invisible formatting, smart quotes, and non-standard dashes. Then, copy from Notepad into Symphony. ​
You receive an encryption error message.	You must ensure the file is not password-protected or encrypted before uploading. ​
You need to upload files from a SharePoint link.	You must download the file to your computer first, and then upload it directly from your local drive. ​
You need to see more detail on security protocols.	Contact the GSA National Customer Service Center for assistance. ​
Evaluation Question: "Does this document satisfy RFP Section X?"	Symphony Support cannot answer this. We provide technical assistance for the upload process, but we cannot interpret solicitation requirements or confirm if a document is "compliant" for scoring. ​
DoD/Government network user facing document upload failures.	Typically .mil or network-restricted users should check local firewall/VPN settings or attempt uploads outside strict network proxies if document transfers time out or strip data. ​

Related Articles / Links  

• Past Performance: Adding Projects, Experience, and Performance Data—Guide on tagging documents before upload
    
• GSA National Customer Service Center—For detailed security protocol inquiries
    
• Submit a Ticket to the Symphony Help Desk—For technical issues

Purpose: This guide gives you a complete overview of the cloud-based Symphony Procurement Suite. It explains the two core modules, Audition and Performer, and details the benefits for every user in the contract lifecycle.

Table of Contents

• Before You Start
• Information Sections

1. The Symphony Mission and Architecture

2. Benefits for Program Office and Industry

3. Technology and Integrations   

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following official disclaimer before you proceed:

• Guidelines and requirements provided by the Federal Government always take priority over any information provided by the developer, Apex Logic, Inc.

• The views and opinions expressed here do not necessarily reflect those of the Federal Government.

Information Sections

1. The Symphony Mission and Architecture

Symphony is a full lifecycle software service. It manages the complex logistics of government contract vehicles in accordance with FAR 16.5.

• Symphony Audition (Pre-Award): This module handles the competition process. It manages configuration, proposal intake, evaluation, and source selection.

• Symphony Performer (Post-Award): This module manages contract administration. It handles fair opportunity task orders and ongoing contract obligations.

• The platform is hosted on cloud.gov with a FISMA Moderate Authorization to Operate (ATO).

Diagram illustrating the platform securely automating the contract process and showing the two modules.

2. Benefits for Program Office and Industry

Symphony enhances transparency and integrity throughout the contract lifecycle by offering specific advantages to each user group.

• For Program Office Managers: The system streamlines the process for issuing master contract RFPs. It simplifies source selection and manages contract vehicles efficiently.

• For Buyers: The platform provides a centralized hub. This helps streamline market research and simplify the ordering process.

• For Industry (Contractors): Symphony is a single entry point for contractors. Users can submit high-quality proposals and store historical contract documents.

3. Technology and Integrations

Symphony is built on an API-first design that allows all user actions to trigger external system calls.

• API Integration: This design allows seamless integration with external systems. It can automatically generate, post, and release orders based on data from third-party systems.

• Contract Intelligence: The system provides insight into programmatic functions. This improves transparency and helps reduce the government’s risk regarding fair opportunity.

• Coming Soon: Maestro: Apex Logic is developing the Maestro module. This AI-powered system will streamline contract management and improve compliance.

Compliance visualization showing the text 'FISMA Moderate ATO' and data protected by encryption on a cloud server.

Troubleshooting

Issue	Fix
I need more information on the company that developed Symphony.	You can visit the official Apex Logic Website for details on its services and mission.
I have questions about a Federal Government requirement (FAR).	You must consult the relevant solicitation documents or address the question directly to the Federal Government.

Related Articles / Links

• Apex Logic Website
• GSA National Customer Service Center
• Submit a Ticket to the Symphony Help Desk

Purpose: This guide explains Symphony’s automatic session timeout policy, why logouts occur, and best practices to avoid losing unsaved proposal data while working in the portal.

TABLE OF CONTENTS

• Information Sections

1. Automatic Inactivity Timeout Limits

2. Why Automatic Logouts Occur

3. Best Practices to Prevent Loss of Proposal Data

• Troubleshooting
• Related Articles / Links

  

Information Sections

1. Automatic Inactivity Timeout Limits

To satisfy federal security compliance standards for unclassified government procurement systems, Symphony enforces automatic session limits:

• Inactivity Limit: Users are automatically logged out after 15 minutes of continuous inactivity.
    
• Unsaved Work: Any text, field entries, or document uploads that have not been explicitly saved before the 15-minute mark will be lost upon session expiration.
    
• Background Tabs: Running Symphony in a background tab without actively clicking or typing does not count as system activity.

2. Why Automatic Logouts Occur

Automatic session termination is a mandatory platform security control:

• FedRAMP & NIST Compliance: Government procurement platforms must prevent unauthorized access to sensitive vendor data if a terminal or laptop is left unattended.
    
• Single-Token Session Protection: Symphony restricts each user account to a single active session token to maintain data integrity during proposal evaluation and submission window peaks.

3. Best Practices to Prevent Loss of Proposal Data

• Save Frequently: Click the Save or Next button on proposal forms continuously while drafting responses.
    
• Draft Content Offline: Write lengthy technical responses, narrative blocks, or proposal details in an external document editor (e.g., Microsoft Word or Notepad) before pasting them into Symphony.
    
• Complete Uploads in One Sitting: Do not leave document upload screens open while retrieving files or waiting on team approvals.

Troubleshooting 

Session Errors

If you encounter an "Invalid Token," "Session Expired," or continuous redirect loop upon logging back in:

1. Close all open Symphony browser tabs.
     
2. Clear your browser's Cache and Cookies.
     
3. Re-launch your specific Contract Vehicle portal URL and log in using your MFA authenticator code.

Plain Text Sanitization

Issue: Text form fields, draft boxes, or file uploads fail or throw errors after copying/pasting from Microsoft Word.

Fix:

1. Sanitize Your Text: Paste the text into a plain-text editor (like Notepad on Windows or TextEdit in Plain Text mode on Mac) first. This strips out invisible formatting, smart quotes, and non-standard dashes. Then, copy from Notepad into Symphony.
     
2. Clean File Names: Ensure uploaded filenames use only alphanumeric characters, standard hyphens (-), or underscores (_). Avoid smart quotes (“ ”), special symbols (&, #, %), or en-dashes (–) in your file names.
     
3. Use Keyboard Shortcuts: When pasting into rich-text text boxes in Symphony, use Ctrl + Shift + V (Windows) or Cmd + Shift + V (Mac) to "Paste as Plain Text" directly into your browser.

 

Related Articles / Links

• Symphony Sign-In Guide: Credentials, Password Resets, and Account Activation—Manage credentials, password resets, and authenticator apps.
    
• Get Help from the Support Center—View support hours, SLAs, and submit a technical ticket.

Purpose: This guide helps you use the My Company component. This is the central hub for all business users to manage their reusable assets, team members, and contract information after successfully signing in.

Table of Contents

• Before You Start
• Steps

1. View and Manage Your Asset Library

2. Manage Contracts, Teaming Partners, and Corporate Assets

3. Review the Document Library  

• Troubleshooting
• Related Articles & Resources

Before You Start

• Primary Component: My Company is the primary, central component for all business users in Symphony.
  
  
• Reusable Assets: The assets you store here are reusable across all future proposal submissions.
  
  
• Master Repository Boundary: Assets stored in My Company serve as your master corporate library. Storing assets here does not automatically claim points or populate an active proposal draft. Points must be explicitly claimed inside each solicitation's Submission Workspace.
  
  
• Shared Access: All active users registered under your company's UEI and CAGE code have access to the data within this component.
  
  
• Requirement vs. Technical Support: The Symphony Help Desk provides support for technical platform issues only (e.g., login errors, file upload failures). For questions regarding solicitation requirements or what documents satisfy an RFP requirement, you must contact the Government Program Office or Contracting Officer listed in the solicitation. The RFP requirements always outweigh the Symphony platform.

Steps

1. View and Manage Your Asset Library

Start by accessing the central component to view your company's stored information.

1. Go to the My Company screen to access your asset library.
     
2. Use the left navigation menu to view and complete the various asset tabs.
     
3. View the Company Overview tab to see a summary of your assets.
     
4. View the SAM Data tab to review your legal business name, UEI, CAGE code, and registration details.

My Company page with the left navigation menu highlighted.

Important SAM.gov Data Note 

SAM.gov information is retrieved during your initial registration and does not automatically sync in the background. If your company updates its details in SAM.gov, you must submit a ticket to the Help Desk requesting a manual data refresh (attaching an executed SF-30 Contract Modification if you are an awarded Contract Holder).

2. Manage Contracts, Teaming Partners, and Corporate Assets

    1. Contracts: Access the Contracts section located within the My Company component if you are an awarded Contract Holder (e.g., ASTRO or DHA) to manage contract administration tasks.

Contracts section visible within the My Company component for eligible Contract Holders.

    2. Team Members: Go to the Team Members section to add or update subcontractor, partner, and Joint Venture (JV) member information.

External Partners vs. Internal Users The Team Members tab is strictly for adding external partner companies (subcontractors, JV members, partners). You cannot use this tab to add your internal employees or colleagues. To add internal employees to your Symphony account: Colleagues must self-register on the correct portal using your company’s exact UEI and CAGE code.    An active Administrator must log in, navigate to the Administration tab (outside of My Company), and switch their status to Active.

    3. MRCLs: Add Members, Representatives, Affiliates, Parent/Subsidiary, or Commercial Lead entities tied to your corporate structure.

    4. Projects / Past Performance: Upload master contract details, CPARS, and performance records. (Treat subcontractor experience as a commercial project when adding it to My Company, as it did not involve a direct contract with the government).

    5. Business Factors: Store company-level certifications, accounting systems, facilities clearances, and organizational changes (mergers/acquisitions/novations).

    6. Cost / Price: Store and manage solicitation pricing claims, completed Excel pricing spreadsheets (.xlsx), and supporting documentation (e.g., Basis of Estimate or Labor Rate Attestations). 

  

3. Review the Document Library

The Document Library is the final section of My Company and serves as the official archive for all uploaded files.

1. Navigate to the Document Library tab to view all files uploaded across your assets.
    

The Document Library tab showing a read-only list of folders organized by Team Members, MRCLs, Projects/Past Performance, Business Factors, Cost/Price, and Submissions.

Read-Only System Archive: The Document Library is view-only—you cannot upload, edit, or delete documents directly from this screen. 

To manage or delete documents, you must go to the specific asset tab (Projects, Business Factors, or MRCLs) where the file was originally linked, remove the reference, and save your changes.

Troubleshooting

Issue	Fix
You added projects to My Company, but your Live Score is 0.	Assets in My Company are library files only. Enter your active Submission Workspace, link the project under the Projects tab, and click BEGIN to manually claim its Performance Factors. ​
Your SAM Data tab shows outdated company information.	Symphony retrieves SAM data during initial registration and does not auto-sync. Make changes in SAM.gov first, then submit a Help Desk ticket requesting a manual data refresh (attach an SF-30 Contract Modification if you are a Post-Award Contract Holder). ​
You cannot see your contracts in My Company.	Confirm you registered under the correct company at the right link for the Contract Vehicle. ​
Your Cost/Price upload fails or gives a loading error.	Symphony requires exactly one unencrypted .xlsx file and at least one supporting file. Verify your spreadsheet is the most recent version, not password-protected and that no columns/rows were removed from the government template. ​
You need to delete documents.	You cannot delete documents from the Library. You must go to the asset tab where the file was originally linked, remove the reference, and then delete the file. ​
You can't add new employees or colleagues to your account.	Colleagues must self-register on the portal using your company's UEI and CAGE code. Once registered, an active Administrator must go to the Administration tab to switch their status to Active. ​
You are adding a project performed as a subcontractor.	Treat this as a commercial project when adding it to My Company, as it did not involve a direct contract with the government. ​
You cannot restrict user access to sensitive data.	Symphony is designed so all active users have full access to all company data under the same UEI/CAGE code. To protect sensitive pricing files, upload Cost/Price assets as your final step before proposal submission. ​
I am unsure how to answer a specific RFP question (e.g., Annual Receipts).	Contact the Program Office. Symphony Support cannot interpret government solicitation requirements or provide guidance on how to respond to RFP fields. Please refer to the official RFP or contact the Contracting Officer for the specific vehicle (e.g., OASIS+, Alliant 3). ​

Related Articles & Resources

• Proposal Assembly & Submission Guide: Master Workflow and Order of Operations
  
  
• Teaming Guide: Managing Subcontractors, Partners, and MRCLs
  
  
• Past Performance: Adding Projects, Experience, and Performance Data
  
  
• Document Upload & Submission Security: File Types, Limits, and Verification
  
  
• Administrator Guide: Activating Users and Assigning Permissions
  
  
• SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data
  
  
• Cost/Price Section Guide: Uploading Pricing Templates and Basis of Estimate Documentation

Purpose: This comprehensive guide helps you successfully add, manage, and verify all your Team Members (CTAs) and Meaningful Relationship Commitment Letters (MRCLs) — relationships with associated entities — within your company's reusable asset library.

Table of Contents

• Before You Start
• Steps

1. Add a New Team Member or MRCL

2. Assigning Partners to Specific Proposal Submissions

3. How to Unclaim Factors and Delete Documents

4. Updating Relationship Type or Forcing a SAM Refresh

5. Special Contracting Officer (CO) Exceptions for MRCLs      

• Troubleshooting
• Related Articles / Links

Before You Start

Make sure you know the following essential facts before managing associated entities:

• Solicitation Preference Filter: Always set the filter to your target solicitation (e.g., OASIS+) before adding or editing Team Members and MRCLs.
    
• Two-Stage Teaming Workflow (Library vs. Submission Workspace): Just like projects, adding a partner under My Company → Team Members only stores their profile in your master asset repository. Adding a team member to My Company does not automatically claim them on a proposal. To use a partner for points or past performance, you must enter your specific SubmissionWorkspace on the Dashboard, navigate to Team Members / MRCLs, and explicitly assign them to that solicitation package.
    
• Active SAM.gov Requirement: Associated entities must have an Active registration status in SAM.gov. Entities in "ID Assigned," "Pending," or "Inactive" status cannot be validated by Symphony.
    
• SAM.gov Authority & Validation Banners: SAM.gov is always the official federal system of record for your business designations and socioeconomic types. As long as your partner’s record is active and accurate in SAM.gov, you can still proceed with submission even if an advisory validation banner flags a business type discrepancy.
    
• SAM Data Immutability: Because SAM data is captured at the exact moment an entity is initially added, updating SAM.gov after a partner is already in Symphony will not automatically sync. You must briefly unlink and re-add the partner to trigger a fresh SAM API data pull.
    
• Relationship Type Immutability: An entity's teaming relationship type (e.g., Subcontractor, JV Member, Mentor, Protégé) is locked upon creation so Symphony can assign appropriate folder directories and validation rules. If you selected the wrong type (such as choosing generic JV Member instead of Mentor or Protégé), you must unlink, delete, and re-add the partner with the correct classification.
   
• Internal Users vs. External Partners: The Team Members tab is strictly for managing external partner companies (subcontractors, Joint Venture members, CTA partners). Do not use this tab to add internal employees or colleagues. Internal staff are managed via self-registration and activated on the Administration tab.

 

Steps

1. Add a New Team Member or MRCL

Symphony uses a guided wizard to verify associated entities using System for Award Management (SAM.gov) data.

1. Go to My Company, then select either the Team Members tab or the MRCLs tab.
     
2. Click + New Team Member or + New MRCL.

Team Member tab in My Company showing the +New Team Member button highlighted alongside the active list of associated entities displaying the Prime listed first.

Step 1: Select Type & Enter UEI: Select the exact relationship type from the dropdown (e.g., Subcontractor, JV Member, Mentor, Protégé) and enter the entity's 12-character SAM Unique Entity Identifier (UEI). (Note: For MRCLs, select the specific Meaningful Relationship type from the dropdown, such as Parent Company or Subsidiary).
  

Step 2: Confirm Company: Verify that the retrieved legal business name, address, and CAGE code match your partner's official record.
  

Step 3: Claim Team Member Business Factors: Select and claim any applicable company-level certifications or systems contributed by the partner.
  

Step 4: Upload Teaming Agreements: Attach the required commitment letter or agreement under the Documents tab.

Team Member Documents tab showing the location for uploading Partner Agreement documentation.

  

Step 5: Review & Save: Review all entries and click Save and Complete to add the partner to your master asset library. 

Understanding the "Prime" Listing in Team Members ​ You will notice that your own company (the Prime Contractor) is listed at the top of the Team Members roster with Type: Prime. ​​​Why it appears: Symphony lists the Prime first so you can see the relationship alongside your teaming partners in one centralized area. (This Prime listing only appears on the Team Members tab; it is not listed on the MRCLs tab).    Scorecard Indicator Difference: On the master Company Overview page, only the Prime Contractor's Business Factors display as full-shaded circles. Partner business factors do not populate as shaded circles on the main company overview—they only display on the Proposal Overview page inside an active submission workspace as half-shaded circles once assigned to a bid.

2. Assigning Partners to Specific Proposal Submissions

Adding a partner to My Company makes them available, but you must explicitly add them to each specific proposal where they are participating.
  

1. Go to your Dashboard and select the active Submission Workspace for your target solicitation (e.g., OASIS+ Small Business).
     
2. Navigate to the Team Members / MRCLs tab within the proposal submission menu.
     
3. Use the Team Member /MRCL dropdown and select the partner from your master library roster.
     
4. Verify that their attached teaming agreements and business factor claims populate on your submission Score Card.

3. How to Unclaim Factors and Delete Documents

To manage or delete uploaded commitment documents and business factor attachments, follow this step-by-step workflow:
  

1. Go to My Company and select the correct Business Factors tab for your company or Team Members.
     
2. Select the specific Business Factor name and click the Unclaim button.
     
3. Scroll below the file upload section to view the attached documents.
     
4. Identify Trashcan Colors:
   • Red Trashcan: Use the red trashcan icon to delete the document. Red icons indicate that the file was originally uploaded in this specific factor window.
       
   • Grey Trashcan: Grey trashcans are displayed on the Documents tab to denote that they are disabled because the file was originally uploaded in another location or asset tab. To delete a file with a grey trashcan, you must navigate back to the original source tab where it was first attached.
       
5. Replace Files: If replacing a document, upload the new file directly into the upload box.
     
6. Save Your Changes: Click Certify and Claim to save your updates—OR click the close (X) button at the top of the window to keep the factor unclaimed.

Team Member profile showing the Business Factors section and Documents tab.

 

4. Updating Relationship Type or Forcing a SAM Refresh 

Because SAM data and relationship classifications are locked upon entity creation, updating locked details requires a quick Unlink → Re-Add → Re-Link sequence:

• Phase 1: Clear Submission Links: Go to Dashboard → Submissions → Team Members and remove the partner from your active proposal draft.
    
• Phase 2: Clear Library Dependencies: Go to My Company → Projects and temporarily set "Who performed this work?" to the Prime for any projects linked to this partner. Under My Company → Team Members, unclaim their Business Factors and delete their attached documents using the red trashcans.
    
• Phase 3: Delete & Re-Add Entity: Click Delete Team Member. Click + New Team Member, enter their 12-character UEI, and select the correct relationship type (Mentor, Protégé, Subcontractor, etc.). (Re-entering the UEI forces Symphony to pull their live, updated SAM.gov profile).
    
• Phase 4: Re-Link Workspace Claims: Re-claim their Business Factors, re-upload their Teaming Agreements, re-assign their Projects, and add them back to your active proposal submission.

  

Message box directing the user to remove all documents before deleting a Team Member.

5. Special Contracting Officer (CO) Exceptions for MRCLs

• Inactive MRCL Entities (Unable to Obtain SAM Registration): If claiming past performance from an inactive or acquired corporate entity that can no longer obtain SAM.gov registration, you cannot add them in the MRCL feature. Instead, submit the project and commitment documentation directly under your offering entity's Projects / Past Performance section, and upload the commitment letter as a cover letter in Submission Documents IF directed by solicitation guidelines.
    
• Pending SAM Registration at Deadline: If an active MRCL entity's SAM registration is still pending at proposal submission, upload their commitment letter and proof of pending SAM registration directly under the Prime's Projects / Past Performance or Business Factors section, and attach a copy in Submission Documents.

Troubleshooting

Issue	Root Cause	Fix
Partner is in My Company, but not showing on proposal Scorecard.	The partner was added to the master asset library but not assigned to the submission workspace.	Open your active proposal submission workspace on the Dashboard, navigate to Team Members and select the partner from your library. ​
"Cannot Delete Team Member" error message appears.	The entity still has attached documents or is linked to an active Business Factor or Project claim.	Follow the 4-Phase Unlinking Sequence above: remove the entity from active submissions on the Dashboard first, unclaim business factors, delete documents via red trashcans, and re-assign projects before deleting. ​
You cannot delete a document. The Trashcan icon next to a document is greyed out and cannot be clicked.	The file was uploaded in another location or tab and is only displaying here as a view-only reference.	​Go back to the original source tab (e.g., ​Projects, or Business Factors) where the file was first attached to delete or replace it. ​
Why is our Prime company listed under Team Members?	Symphony includes the Prime at the top of the Team Members list (Type: Prime) so you can manage all workspace factors in one area. ​	This is expected system behavior. Note that only the Prime's factors show as full-shaded circles on the main Company Overview. ​
I see a validation warning regarding my partner's SAM business type/designation.	Advisory validation message.	SAM.gov is the official legal system of record. As long as your partner's record is active and correct in SAM.gov, you can ignore advisory warnings and proceed with submission. ​
You need to update an associated entity's SAM data or relationship type.	SAM.gov details and relationship classifications are locked once an entity is created.	​Follow the 4-Phase Unlinking Sequence above to delete and re-add the Team Member record to force a fresh SAM.gov data pull or select the correct relationship type. ​
​How do I add an internal colleague or proposal writer to our account?	Attempting to use My Company ​→ Team Members to invite internal staff.	​Do not use the Team Members tab. Colleagues must self-register on the portal landing page using your company's UEI and CAGE code, after which an Administrator activates them on the Administration tab. ​

Related Articles / Links

• Company Profile Guide: UEI, SAM.gov Details, and Corporate Settings—General guide to the central hub
   
• SAM.gov Data in Symphony: Access Requirements and Refreshing Entity Data
    
• Portal Links and Access Requirements Guide 
    
• Past Performance: Adding Projects, Experience, and Performance Data—Guide for past performance claims
    
• Submit a Ticket to the Symphony Help Desk—For technical issues
    
• Administrator Guide: Activating Users and Assigning Permissions—Guide for Administrators on user management
    
• OASIS+ Quick Reference Guide: Errors & Warnings 
      
• Document Upload & Submission Security: File Types, Limits, and Verificationon