Providing security services via federation-based network during roaming

A network device comprising:

• one or more computer processors configured to perform an operation comprising:
• authenticating an identity of a user of a client device associated with an access network provider, wherein authenticating the identity of the user comprises:
• receiving, from an identity provider, a credential associated with the identity;
• and
• receiving, from the identity provider, information identifying a network-based security service to be provided to the client device;
• and
• establishing, using the credential and the received information, a secure connection between the access network provider and a security service provider that is capable of providing the network-based security service to the client device.

A computer program product comprising:

• a computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code executable by one or more computer processors to perform an operation comprising:
• authenticating an identity of a user of a client device associated with an access network provider, wherein authenticating the identity of the user comprises:
• receiving, from an identity provider, a credential associated with the identity;
• and
• receiving, from the identity provider, information identifying a network-based security service to be provided to the client device;
• and
• establishing, using the credential and the received information, a secure connection between the access network provider and a security service provider that is capable of providing the network-based security service to the client device.