Method and apparatus for enabling access to applications integrated with a visited network

A method comprising:

• an application server receiving a request for service from a wireless transmit/receive unit (WTRU) that is associated with a home network, wherein the home network comprises both a home subscriber server (HSS) and a bootstrapping server function (BSF), wherein the HSS and the BSF are communicatively coupled with one another via a Zh-type reference point;
• the application server authenticating the WTRU at least in part by:
• redirecting the WTRU to an identity provider (IDP) that is co-located with a network application function (NAF) (IDP/NAF), wherein the IDP/NAF and the BSF are communicatively coupled with one another via a Zn-type reference point;
• and
• receiving an assertion from the WTRU that the IDP/NAF has authenticated the WTRU, wherein the assertion is based on user security settings retrieved from the BSF by the IDP/NAF over the Zn-type reference point;
• and
• subsequent to authenticating the WTRU, the application server:
• retrieving user-specific Sh-reference-point-type data from the HSS via the IDP/NAF over (i) the Zn-type reference point between the IDP/NAF and the BSF and (ii) the Zh-type reference point between the BSF and the HSS;
• and
• providing the requested service to the WTRU based on the retrieved user-specific Sh-reference-point-type data.