Every article about getting into government contracting opens with the same sentence. Step one, register on SAM.gov. Then it moves straight to step two like the first one took an afternoon.

In practice it can take much longer. A business name that's typed one way on a state filing and another way in SAM's own records is enough to stall an application in a manual review queue for more than a week, and that's only one of several places the process can catch on something small.

Nobody writes down what SAM.gov for small business registration actually consists of. So here's what the process actually asks for, step by step.

SAM.gov for small business is free, and there are two versions

First thing. It costs nothing. GSA's own registration checklist says so in the opening paragraph: there is no charge to get a Unique Entity ID, register your entity, or maintain that registration (SAM.gov entity registration checklist).

GSA repeats it on the small business page. You do not need to pay a third party to complete your registration (GSA). Third-party services that offer, for a fee, to expedite a SAM.gov registration are selling something that doesn't exist.

There's nothing to expedite.

Second thing, and this one is easier to get wrong than it looks. When you start, you pick a purpose: All Awards, or Financial Assistance Awards Only. Financial Assistance Only covers grants and loans.

If you want to bid on contracts you need All Awards. Pick the wrong one and you'll finish a registration that won't let you do the thing you registered to do.

There's also an option to get a Unique Entity ID without registering at all. That's for entities that only need to be identified, like reporting as somebody's sub-awardee. Take that route and you can't apply directly for federal awards (SAM.gov).

What SAM.gov for small business asks you for

The UEI is a 12-character alphanumeric value and SAM assigns it to you during registration. It replaced the DUNS number, so you're no longer going to a third-party site to get an identifier. If you're already registered, you already have one (SBA).

To get it you enter four things: legal business name, physical address, date of incorporation, and state of incorporation. A P.O. box will not work as the physical address. SAM validates the name and the address, and if it can't, you open a help ticket with the Federal Service Desk from that page.

The part worth underlining is GSA's own tip on it: make your business name, address, and ownership details consistent across IRS, SAM.gov, and SBA records.

Whatever the Secretary of State filing says your name is, that's your name. Not what's on the invoices. Not what's on the truck.

After the UEI comes core data. Fiscal year end, your TIN, IRS consent, banking information for electronic payment, and an MPIN that you create during the process. If you don't have a CAGE code you don't go find one first. You answer no, and one gets assigned after you submit.

Then assertions, which is where your NAICS codes and your size metrics go. Size is annual receipts and number of employees under SBA's rules at 13 CFR 121.

Most non-manufacturing businesses under $7.5 million in average annual receipts qualify as small, and most manufacturers at 500 employees or fewer, with a pile of exceptions by industry. SBA has a size standards tool for checking yours.

How receipts get calculated under SBA's own rules doesn't always match what a business pulls straight from its tax returns, so it's worth checking the calculation method in the size standards tool above rather than assuming the two are the same.

Then representations and certifications, then three required points of contact: accounts receivable, electronic business, and government business. Remember that third one.

Submitting is not registering

This is the part that trips people up.

SAM.gov tells you to allow at least ten business days after you submit for the registration to become active. In that window the government validates your TIN with the IRS and validates your CAGE code. If either one fails, you get an email with instructions to fix it and resubmit.

That email goes to your government business POC. The checklist tells you to check your spam folder for it, which tells you how often that goes sideways.

The FAR defines what "registered" means and it's four conditions at once: you entered all the mandatory data including the UEI and CAGE code, you completed the core, assertions, reps and certs, and points of contact sections, the government validated all mandatory fields including that TIN check with IRS, and the record is marked Active (FAR 52.204-7).

The last one isn't yours to do.

Same provision says you have to be registered when you submit an offer or quotation and at the time of award. It also says, in about the driest phrasing available, that offerors who aren't registered should consider applying immediately upon receipt of a solicitation. Meaning you can't find something you want on a Monday and be eligible for it that Friday.

What the obligation looks like after you win your first government contract is a separate mess. This is the front half of it.

The checkbox that hides you

One screen, easy to blow past. During registration you choose whether your entity shows up in public search results.

Restrict it and your record isn't visible to other non-federal entities, or to the state and local governments who might want to do business with you. Federal users still see you, and your non-sensitive information still goes out in the SAM public data file.

So you're not hidden in any useful sense. You're just missing from the searches a lot of buyers run.

Do these before you start

Pull the formation paperwork before you open the site, not partway through a half-finished form. The name and address on that filing are the source of truth, and everything else in the registration bends to match them.

Put a monitored inbox on the government business POC. Not a shared address nobody opens.

And start before you need it. Ten business days after submitting, and the calendar doesn't care that the solicitation you want closes in nine.

Free help exists on both ends of this. The Federal Service Desk runs live chat and phone Monday through Friday, 8 a.m. to 8 p.m. Eastern. And APEX Accelerators will sit down and do the registration with you for nothing, worth repeating from the piece on how to get a first government contract because it's the most underused resource in this whole process.

Once you're active, reading the solicitations is its own skill. That's covered separately in how to read a SAM.gov solicitation.

And the registration expires. Every 365 days it has to be renewed or it stops being active. That one's big enough to deserve its own day.

Start with the free course

If you don't have a UEI yet, the free course has a module that walks through SAM.gov registration. Modules 0 and 1 are open to anybody, 2 and 3 need a free account, no card.

Start the free course →

No credit card. You'll need about an hour.

Sources