IAM implementation for hybrid environments