NSSAAF

Technical Explanation

Introduced in 3GPP Rel-16, the NSSAAF coordinates with external enterprise AAA servers (RADIUS/Diameter) to execute secondary authentication. Before a device can join a high-security corporate slice (e.g. hospital or power grid), the NSSAAF challenges the UE via EAP over NAS, ensuring non-corporate SIMs cannot join.

Key Functions

• Executes secondary enterprise authentication for private network slices
• Interfaces directly with third-party enterprise AAA/RADIUS servers
• Guarantees that access to secure slices requires corporate authorization