Federation, user-centric identity, Single Sign-on, "identity as a service": What are the real trends in identity and access management?