Getting your access management right - challenges and pitfalls of access management in the cloud