Section: I.10.4.1 Support for N5CW devices in SNPN without CH
Content: Procedures for authentication for devices that do not support 5GC NAS over WLAN access are described in clause 7A.2.4. For SNPN the procedures are modified as follows: Steps 0-1 are performed as described in clause 7A.2.4. In step 2 of clause 7A.2.4 the SUCI can be of type anonymous SUCI if the construction of SUCI as described in clause 6.12 cannot be used and if the employed EAP method supports SUPI privacy. Step 3-6 is performed as described in clause 7A.2.4. In step 7 of clause 7A.2.4, the authentication method is selected. 5G AKA, EAP-AKA’, or any other key-generating EAP authentication method apply for UE authentication in SNPN. In case UDM receives an anonymous SUCI, the UDM chooses the authentication method as described in step 4 of Annex I.2.2.2.2. Editor's Note: How the authentication method is selected is ffs. In step 8 of clause 7A.2.4, in case the AUSF received an anonymous SUCI in step 7, the AUSF shall perform steps 11-13 of Annex I.2.2.2 after a successful authentication to inform the UDM of the actual SUPI. Steps 9-14 are performed as described in clause 7A.2.4.