Supporting Compliant and Secure User Handling - A Structured Approach for In-House Identity Management