Secure cloud edge interconnect point selection

An apparatus comprising:

• a network interface configured to enable network communications;
• and
• one or more processors coupled to the network interface, and configured to perform operations including:
• obtaining, on behalf of a wireless mobile device, an access identifier that indicates an access location of the wireless mobile device that is wirelessly connected to wireless network infrastructure equipment operated by an access network provider that is associated with, and a member of, a federation of access network providers, wherein obtaining the access identifier includes receiving a message from an identity provider entity that is configured to operate in accordance with procedures of the federation, and which identity provider entity has authenticated the wireless mobile device based on roaming consortium organization identifier information for the wireless mobile device;
• deriving the access location for the wireless mobile device based on the access identifier;
• obtaining one or more resource policies for determining an edge resource to be used for traffic associated with the wireless mobile device;
• and
• selecting an edge resource for the wireless mobile device based on the one or more resource policies and the access location.

One or more non-transitory computer readable storage media encoded with instructions that, when executed by at least one processor, cause the at least one processor to perform operations including:

• obtaining, on behalf of a wireless mobile device, an access identifier that indicates an access location of the wireless mobile device that is wirelessly connected to wireless network infrastructure equipment operated by an access network provider that is associated with, and a member of, a federation of access network providers, wherein obtaining the access identifier includes receiving a message from an identity provider entity that is configured to operate in accordance with procedures of the federation, and which identity provider entity has authenticated the wireless mobile device based on roaming consortium organization identifier information for the wireless mobile device;
• deriving the access location for the wireless mobile device based on the access identifier;
• obtaining one or more resource policies for determining an edge resource to be used for traffic associated with the wireless mobile device;
• and
• selecting an edge resource for the wireless mobile device based on the one or more resource policies and the access location.