SAM — Secure Access Management

SAM is composed of several decoupled but integrated services that enable secure authentication, fine-grained authorization, and automated user provisioning.

• Authentication API: Secure, performant login infrastructure supporting SSO, federation, and MFA.
• Authorization API: Policy-driven access control with real-time entitlement checks and license enforcement.
• Identity API: Centralized identity store supporting multiple identity types.
• Provisioning API: Automates account setup and product-level access propagation.

SAM supports RBAC for internal users, allowing secure delegated access to SAM Admin Tool capabilities. For product-level end users, it enables attribute-based provisioning, dynamically assigning entitlements based on contract terms, license type, and geography — ensuring compliance and tailored access at scale.

A comprehensive internal-facing UI used by product managers to define access policies, customer support to manage entitlements, and dev/ops teams to monitor access logs. It enables role-based controls, audit trails, and direct integration with backend APIs.

As Associate Director, I led the end-to-end product ownership for the entire SAM ecosystem.

• Strategic Leadership: Defined the multi-year vision across Identity, Authentication, and Authorization.
• Modernization: Consolidated 3+ fragmented legacy identity systems into SAM.
• Operational Excellence: Designed and delivered the SAM Admin Tool to reduce reliance on engineering support.

The SAM platform has become the central nervous system of access and identity across S&P Global.

• $1.8B+ revenue influence across the digital ecosystem.
• 80% onboarding automation and contract fulfillment time savings.
• 99.5% uptime and 3x throughput gain.