User-centered design of identity and access management systems