Self-Sovereign Identity for Access Requests